Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213141 7.5 危険 日立
IBM
オラクル
- Oracle Java SE および Java SE Embedded における Sound に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2427 2015-03-16 18:08 2014-04-15 Show GitHub Exploit DB Packet Storm
213142 7.5 危険 日立
IBM
オラクル
- Oracle Java SE および Java SE Embedded における JAX-WS に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2423 2015-03-16 18:06 2014-04-15 Show GitHub Exploit DB Packet Storm
213143 10 危険 日立
IBM
オラクル
- 複数の Oracle Java 製品における 2D に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2421 2015-03-16 18:05 2014-04-15 Show GitHub Exploit DB Packet Storm
213144 2.6 注意 日立
IBM
オラクル
- Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2420 2015-03-16 18:04 2014-04-15 Show GitHub Exploit DB Packet Storm
213145 7.5 危険 日立
IBM
オラクル
- Oracle Java SE および Java SE Embedded における JAXB に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2414 2015-03-16 18:03 2014-04-15 Show GitHub Exploit DB Packet Storm
213146 4.4 警告 日立
IBM
オラクル
- OpenJDK および Oracle Java JDK の unpack200 における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2014-1876 2015-03-16 18:02 2014-02-3 Show GitHub Exploit DB Packet Storm
213147 5 警告 PNG Development Group
日立
IBM
オラクル
- libpng に NULL ポインタ参照の脆弱性 CWE-Other
その他
CVE-2013-6954 2015-03-16 18:01 2013-01-9 Show GitHub Exploit DB Packet Storm
213148 5 警告 IBM
Artifex Software
アップル
Mozilla Foundation
オラクル
Google
日立
- Google Chrome および Ghostscript などで使用される libjpeg 6b および libjpeg-turbo における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-6629 2015-03-16 18:01 2013-11-12 Show GitHub Exploit DB Packet Storm
213149 7.5 危険 日立
IBM
オラクル
- Oracle Java SE および Java SE Embedded における AWT に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2412 2015-03-16 17:54 2014-04-15 Show GitHub Exploit DB Packet Storm
213150 4.3 警告 日立
オラクル
- Oracle Java SE および Java SE Embedded におけるライブラリに関する脆弱性 CWE-noinfo
情報不足
CVE-2014-2413 2015-03-16 17:54 2014-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2611 9.8 CRITICAL
Network
nvidia tensorrt_llm NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and i… CWE-502
 Deserialization of Untrusted Data
CVE-2026-24142 2026-05-21 09:04 2026-05-20 Show GitHub Exploit DB Packet Storm
2612 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-8399 2026-05-21 08:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2613 3.1 LOW
Network
emqx emqx A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet Handler. Such manip… CWE-362
Race Condition
CVE-2026-8741 2026-05-21 08:02 2026-05-17 Show GitHub Exploit DB Packet Storm
2614 8.1 HIGH
Network
microsoft malware_protection_engine Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network. CWE-122
Heap-based Buffer Overflow
CVE-2026-45584 2026-05-21 03:56 2026-05-20 Show GitHub Exploit DB Packet Storm
2615 7.8 HIGH
Local
microsoft windows_admin_center Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. CWE-59
Link Following
CVE-2026-42834 2026-05-21 03:29 2026-05-20 Show GitHub Exploit DB Packet Storm
2616 5.8 MEDIUM
Network
- - The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attack… - CVE-2026-7385 2026-05-21 03:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2617 7.8 HIGH
Local
- - Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. CWE-59
Link Following
CVE-2026-41091 2026-05-21 03:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2618 4.8 MEDIUM
Network
- - CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In a… CWE-80
CWE-116
Basic XSS
 Improper Encoding or Escaping of Output
CVE-2026-34246 2026-05-21 03:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2619 7.1 HIGH
Network
- - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap buffer over-read in HeifPixelImage::overlay() in libheif/pixelimage.cc. When compositing an overla… CWE-125
Out-of-bounds Read
CVE-2026-32882 2026-05-21 03:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2620 6.5 MEDIUM
Network
mozilla firefox
thunderbird
Spoofing issue in the Form Autofill component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-290
 Authentication Bypass by Spoofing
CVE-2026-8961 2026-05-21 02:58 2026-05-19 Show GitHub Exploit DB Packet Storm