Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210341 6.9 警告 アップル - Apple OS X の KEXT ツールにおけるカーネルエクステンションへの署名要件を回避される脆弱性 CWE-362
競合状態 		CVE-2015-3709 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210342 4.3 警告 アップル - Apple OS X の NTFS の実装におけるカーネルの重要なメモリレイアウト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-3711 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210343 9.3 危険 アップル - Apple OS X の NVIDIA グラフィックドライバにおける特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-3712 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210344 6.8 警告 アップル - Apple OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-3713 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210345 5 警告 アップル - Apple OS X における起動制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-3714 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210346 6.8 警告 アップル - Apple OS X の code-signing の実装における起動制限を回避される脆弱性 CWE-Other
その他 		CVE-2015-3715 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210347 4.4 警告 アップル - Apple OS X の Spotlight における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-3716 2015-07-8 13:36 2015-06-30 Show GitHub Exploit DB Packet Storm
210348 4.3 警告 アップル - Apple iOS および Apple OS X のカーネルにおける重要なメモリレイアウト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-3721 2015-07-8 12:02 2015-06-30 Show GitHub Exploit DB Packet Storm
210349 6.8 警告 アップル - Apple iOS および Apple OS X の FontParser の TrueTypeScaler における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-3719 2015-07-8 12:02 2015-06-30 Show GitHub Exploit DB Packet Storm
210350 7.5 危険 アップル
SQLite		 - Apple iOS および Apple OS X で使用される SQLite の printf 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-3717 2015-07-8 12:02 2015-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1241 5.4 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that, in customizable analytics dashboards, could have allow… CWE-79
Cross-site Scripting 		CVE-2026-7377 2026-05-16 12:33 2026-05-14 Show GitHub Exploit DB Packet Storm
1242 7.1 HIGH
Network 		datahub datahub DataHub is an open-source metadata platform. Prior to 1.5.0.3, The DataHub frontend (datahub-frontend-react) deserializes attacker-controlled Java objects from the REDIRECT_URL HTTP cookie during the… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-44501 2026-05-16 12:31 2026-05-15 Show GitHub Exploit DB Packet Storm
1243 5.3 MEDIUM
Network 		strapi strapi Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middleware in the users-permissions plugin derived its rate-limit key in part from `ctx… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-64526 2026-05-16 12:30 2026-05-15 Show GitHub Exploit DB Packet Storm
1244 7.2 HIGH
Network 		strapi strapi Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.33.2, a database-query injection vulnerability existed in t… CWE-89
SQL Injection 		CVE-2026-22599 2026-05-16 12:25 2026-05-15 Show GitHub Exploit DB Packet Storm
1245 6.5 MEDIUM
Network 		strapi strapi Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did not invalidate the user's existing refresh-token sessions … CWE-613
 Insufficient Session Expiration 		CVE-2026-22706 2026-05-16 12:23 2026-05-15 Show GitHub Exploit DB Packet Storm
1246 5.4 MEDIUM
Network 		strapi strapi Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints did not enforce the administrator-configured MIME type restr… CWE-434
CWE-693
 Unrestricted Upload of File with Dangerous Type 
 Protection Mechanism Failure 		CVE-2026-22707 2026-05-16 12:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1247 7.5 HIGH
Network 		strapi strapi Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sanitize query parameters when filtering content via relational… CWE-22
CWE-200
CWE-943
Path Traversal
Information Exposure
 Improper Neutralization of Special Elements in Data Query Logic 		CVE-2026-27886 2026-05-16 12:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1248 8.8 HIGH
Adjacent 		zyxel wre6505_firmware ** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attacker on the LAN to execute operat… CWE-78
OS Command  		CVE-2026-7256 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
1249 4.4 MEDIUM
Local 		zyxel wre6505_firmware ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow a local attacker … CWE-922
 Insecure Storage of Sensitive Information 		CVE-2026-7257 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
1250 7.5 HIGH
Network 		zyxel nwa1100-n_firmware ** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of the “webs” binary in Zyxel NWA1100… CWE-120
Classic Buffer Overflow 		CVE-2026-7287 2026-05-16 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm