Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211991 4.3 警告 Lenovo - 複数の ThinkServer 用 ThinkServer System Manager Baseboard Management Controller におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2015-3324 2015-04-21 17:24 2015-03-24 Show GitHub Exploit DB Packet Storm
211992 5 警告 Lenovo - 複数の ThinkServer 用 ThinkServer System Manager Baseboard Management Controller におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-3323 2015-04-21 17:24 2015-03-24 Show GitHub Exploit DB Packet Storm
211993 5 警告 Lenovo - 複数の Lenovo ThinkServer 製品におけるパスワードの暗号化を解除される脆弱性 CWE-310
暗号の問題 		CVE-2015-3322 2015-04-21 17:24 2015-03-24 Show GitHub Exploit DB Packet Storm
211994 2.1 注意 Lenovo - Lenovo USB Enhanced Performance Keyboard ソフトウェアにおけるキー入力情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-3320 2015-04-21 17:24 2015-03-4 Show GitHub Exploit DB Packet Storm
211995 7.5 危険 シックス・アパート株式会社 - 複数の Movable Type 製品におけるフォーマットストリングの脆弱性 CWE-94
コード・インジェクション 		CVE-2015-0845 2015-04-21 16:45 2015-04-14 Show GitHub Exploit DB Packet Storm
211996 2.1 注意 USAA - USAA Mobile Banking アプリケーションにおける銀行口座番号を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-1314 2015-04-21 12:16 2015-01-19 Show GitHub Exploit DB Packet Storm
211997 6.8 警告 シスコシステムズ - Cisco Secure Access Control Server Solution Engine の monitoring-and-report セクションの Dashboard ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-0700 2015-04-21 11:47 2015-04-16 Show GitHub Exploit DB Packet Storm
211998 7.8 危険 シスコシステムズ - Cisco ASR 9000 デバイス上で稼働する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2015-0695 2015-04-21 11:47 2015-04-15 Show GitHub Exploit DB Packet Storm
211999 9.3 危険 シスコシステムズ - Cisco Secure Desktop の Cache Cleaner で配布される特定の Cisco JAR ファイルにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-0691 2015-04-21 11:47 2015-04-15 Show GitHub Exploit DB Packet Storm
212000 3.3 注意 LIXIL - 株式会社 LIXIL の Android 用 My SATIS Genius Toilet アプリケーションにおける物理的なリソース消費を誘発される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4866 2015-04-21 11:04 2013-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2501 8.1 HIGH
Network 		artica pandora_fms Session Fixation vulnerability allows Session Hijacking via crafted session ID. This issue affects Pandora FMS: from 777 through 800 CWE-384
 Session Fixation 		CVE-2026-30808 2026-05-13 23:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2502 7.5 HIGH
Network 		apple macos An information leakage was addressed with additional validation. This issue is fixed in macOS Tahoe 26.5. An app may be able to gain root privileges. CWE-200
CWE-269
Information Exposure
 Improper Privilege Management 		CVE-2026-28976 2026-05-13 23:35 2026-05-12 Show GitHub Exploit DB Packet Storm
2503 8.8 HIGH
Local 		apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. A malicious app may be able to break out of its san… CWE-284
Improper Access Control 		CVE-2026-28978 2026-05-13 23:34 2026-05-12 Show GitHub Exploit DB Packet Storm
2504 7.8 HIGH
Local 		adobe premiere_pro Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… CWE-787
 Out-of-bounds Write 		CVE-2026-34636 2026-05-13 23:31 2026-05-13 Show GitHub Exploit DB Packet Storm
2505 7.8 HIGH
Local 		adobe premiere_pro Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of… CWE-787
 Out-of-bounds Write 		CVE-2026-34637 2026-05-13 23:30 2026-05-13 Show GitHub Exploit DB Packet Storm
2506 7.8 HIGH
Local 		adobe premiere_pro Premiere Pro versions 26.0.2, 25.6.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this … CWE-416
 Use After Free 		CVE-2026-34638 2026-05-13 23:28 2026-05-13 Show GitHub Exploit DB Packet Storm
2507 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A r… CWE-843
Type Confusion 		CVE-2026-28983 2026-05-13 23:22 2026-05-12 Show GitHub Exploit DB Packet Storm
2508 6.5 MEDIUM
Network 		apache apache-airflow-providers-elasticsearch The Elasticsearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.example.com:9200`), wrote the full host URL — including the em… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-41018 2026-05-13 23:22 2026-05-11 Show GitHub Exploit DB Packet Storm
2509 5.9 MEDIUM
Local 		- - An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perfo… - CVE-2026-6815 2026-05-13 23:18 2026-05-12 Show GitHub Exploit DB Packet Storm
2510 5.3 MEDIUM
Network 		- - Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores credentials in an obfuscated form to prevent access to the secrets from a data d… CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2026-6146 2026-05-13 23:18 2026-05-12 Show GitHub Exploit DB Packet Storm