Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2111 5.3 警告
Network
Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用
CVE-2026-6907 2026-05-11 10:54 2026-05-5 Show GitHub Exploit DB Packet Storm
2112 7.2 重要
Network
Ivanti endpoint manager mobile Ivantiのendpoint manager mobileにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-6973 2026-05-11 10:54 2026-05-7 Show GitHub Exploit DB Packet Storm
2113 9.1 緊急
Network
Ivanti endpoint manager mobile Ivantiのendpoint manager mobileにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-7821 2026-05-11 10:54 2026-05-7 Show GitHub Exploit DB Packet Storm
2114 9.6 緊急
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7910 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2115 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-7957 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2116 5.4 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-8006 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2117 7.5 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-8007 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2118 5.4 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-8008 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2119 5 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-8009 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
2120 6.3 警告
Network
Google Google Chrome GoogleのGoogle Chromeにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-8010 2026-05-11 10:54 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2231 - - - Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion. 'Elixir.Bandit.HTTP1.Socket':do_… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-39806 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2232 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The chunked clause of 'Elixir.Bandit.HTTP1… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-39803 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2233 9.8 CRITICAL
Network
- - The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the un… CWE-88
Argument Injection
CVE-2026-31230 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2234 9.8 CRITICAL
Network
- - The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality. When loading model weights f… CWE-502
 Deserialization of Untrusted Data
CVE-2026-31229 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2235 - - - Incorrect authorization in the "submitted together" feature in Gerrit versions 2.12 and later allows an authenticated attacker with force push permissions on a secondary branch to bypass code review … CWE-863
 Incorrect Authorization
CVE-2026-2725 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2236 9.8 CRITICAL
Network
- - An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page. CWE-94
Code Injection
CVE-2025-65719 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2237 - - - External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resources that used CAProvide… CWE-285
CWE-668
Improper Authorization
 Exposure of Resource to Wrong Sphere
CVE-2026-42875 2026-05-14 01:11 2026-05-12 Show GitHub Exploit DB Packet Storm
2238 4.9 MEDIUM
Network
- - External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to create ExternalSec… CWE-285
Improper Authorization
CVE-2026-42876 2026-05-14 01:11 2026-05-12 Show GitHub Exploit DB Packet Storm
2239 6.5 MEDIUM
Network
open5gs open5gs A security flaw has been discovered in Open5GS up to 2.7.7. This issue affects the function smf_nsmf_handle_update_data_in_vsmf of the file /src/smf/nsmf-handler.c of the component SMF. The manipulat… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8290 2026-05-14 01:11 2026-05-11 Show GitHub Exploit DB Packet Storm
2240 6.5 MEDIUM
Network
open5gs open5gs A flaw has been found in Open5GS up to 2.7.7. This vulnerability affects the function smf_nsmf_handle_created_data_in_vsmf of the component SMF. This manipulation causes denial of service. The attack… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8267 2026-05-14 01:10 2026-05-11 Show GitHub Exploit DB Packet Storm