Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213121 3.2 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における VMSVGA device に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6590 2015-01-22 14:27 2015-01-20 Show GitHub Exploit DB Packet Storm
213122 3.2 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における VMSVGA device に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6595 2015-01-22 14:27 2015-01-20 Show GitHub Exploit DB Packet Storm
213123 4.4 警告 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-0377 2015-01-22 14:27 2015-01-20 Show GitHub Exploit DB Packet Storm
213124 2.1 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-0418 2015-01-22 14:27 2015-01-20 Show GitHub Exploit DB Packet Storm
213125 3.2 注意 オラクル - Oracle Virtualization の Oracle VM VirtualBox における VMSVGA device に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-0427 2015-01-22 14:27 2015-01-20 Show GitHub Exploit DB Packet Storm
213126 4.3 警告 オラクル - Oracle iLearning の Oracle iLearning コンポーネントにおける Learner Pages に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6594 2015-01-22 14:23 2015-01-20 Show GitHub Exploit DB Packet Storm
213127 4.3 警告 オラクル - Oracle iLearning の Oracle iLearning コンポーネントにおける Login に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-0436 2015-01-22 14:20 2015-01-20 Show GitHub Exploit DB Packet Storm
213128 7.6 危険 オラクル - Oracle Communications Applications の Oracle Communications Diameter Signaling Router における Signaling - DPI に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6598 2015-01-22 14:13 2015-01-20 Show GitHub Exploit DB Packet Storm
213129 6.8 警告 オラクル - Oracle Retail Applications の MICROS Retail における Xstore Point of Sale に関する脆弱性 CWE-noinfo
情報不足 		CVE-2015-0390 2015-01-22 14:07 2015-01-20 Show GitHub Exploit DB Packet Storm
213130 3.5 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における PIA Core Technology に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-4279 2015-01-22 13:54 2015-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1721 - - - Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, Craft CMS which contains an input-handling flaw in a Yii object creation path that let any authenticated user … CWE-479
CVE-2026-44011 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1722 - - - Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, the GraphQL Address element resolver (src/gql/resolvers/elements/Address.php) performs no schema scope filteri… CWE-862
 Missing Authorization 		CVE-2026-44010 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1723 9.9 CRITICAL
Network 		- - wger is a free, open-source workout and fitness manager. Prior to 2.6, the reset_user_password and gym_permissions_user_edit views in wger perform a gym-scope authorization check using Python object … CWE-863
 Incorrect Authorization 		CVE-2026-43948 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1724 6.8 MEDIUM
Network 		bx33661 wireshark_mcp Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_expor… CWE-22
Path Traversal 		CVE-2026-43901 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1725 7.7 HIGH
Network 		- - Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken aut… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-43890 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1726 4.3 MEDIUM
Network 		- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, the unauthenticated plugin/Scheduler/downloadICS.php endpoint passes attacker-controlled title, description, and jo… CWE-93
CRLF Injection 		CVE-2026-43882 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1727 6.4 MEDIUM
Network 		- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail(), which s… CWE-79
Cross-site Scripting 		CVE-2026-43876 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1728 - - - In the Linux kernel, the following vulnerability has been resolved: liveupdate: luo_file: remember retrieve() status LUO keeps track of successful retrieve attempts on a LUO file. It does so to av… - CVE-2026-43489 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1729 - - - In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error (HCE) The xHCI controller reports a Host Controller Error (HCE) in UA… - CVE-2026-43488 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1730 - - - In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP102 has problems with LPM, cau… - CVE-2026-43487 2026-05-14 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm