Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2141	6.6	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40449	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

2142	6.6	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40450	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

2143	8.2	重要 Network	UltraDAG	UltraDAG	UltraDAGにおける複数の脆弱性	CWE-460 CWE-696	CVE-2026-40583	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

2144	7.5	重要 Network	RansomLook	RansomLook	RansomLookにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-40584	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

2145	5.6	警告 Local	Home Assistant Ecosystem	Home Assistant Command-line Interface (hass-cli)	Home Assistant EcosystemのHome Assistant Command-line Interface (hass-cli)における複数の脆弱性	CWE-1336 CWE-94	CVE-2026-40602	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

2146	5.5	警告 Local	Dayuan Jiang (DayuanJiang)	Next AI Draw.io	Dayuan Jiang (DayuanJiang)のNext AI Draw.ioにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40608	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2147	8.1	重要 Network	Zcash Foundation	Zebra-consensus Zebrad	Zcash FoundationのZebra-consensus等の複数製品における誤った要素を使用した比較に関する脆弱性	CWE-1025 誤った要素を使用した比較	CVE-2026-40880	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2148	7.5	重要 Network	Zcash Foundation	zebra-network Zebrad	Zcash Foundationのzebra-network等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40881	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2149	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40888	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

2150	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40889	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1591	7.5	HIGH Network	coredns.io	coredns	CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The l…	CWE-863 Incorrect Authorization	CVE-2026-33489	2026-05-9 01:00	2026-05-6	Show	GitHub Exploit DB Packet Storm

1592	9.8	CRITICAL Network	coredns.io	coredns	CoreDNS is a DNS server written in Go. In versions prior to 1.14.3, the gRPC, QUIC, DoH, and DoH3 transport implementations incorrectly handle TSIG authentication. For gRPC and QUIC, the server check…	CWE-287 Improper Authentication	CVE-2026-35579	2026-05-9 00:58	2026-05-6	Show	GitHub Exploit DB Packet Storm

1593	6.1	MEDIUM Network	-	-	A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via cmis-online/type.	CWE-79 Cross-site Scripting	CVE-2023-42343	2026-05-9 00:58	2026-05-8	Show	GitHub Exploit DB Packet Storm

1594	7.3	HIGH Network	-	-	Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain sensitive information via a cmis-online/query XXE attack on a Chemistry servlet.	CWE-611 XXE	CVE-2023-42344	2026-05-9 00:58	2026-05-8	Show	GitHub Exploit DB Packet Storm

1595	6.1	MEDIUM Network	-	-	A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp.	CWE-79 Cross-site Scripting	CVE-2023-42345	2026-05-9 00:58	2026-05-8	Show	GitHub Exploit DB Packet Storm

1596	8.7	HIGH Network	-	-	Brave CMS is an open-source CMS. Prior to commit 6c56603, page and article body content entered through the CKEditor rich-text editor is stored verbatim in the database and subsequently rendered with…	CWE-79 Cross-site Scripting	CVE-2026-41524	2026-05-9 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1597	7.1	HIGH Network	-	-	Brave CMS is an open-source CMS. Prior to commit 6c56603, the contact form is publicly accessible (no authentication required). User-supplied message text is passed through PHP's nl2br() function, wh…	CWE-79 Cross-site Scripting	CVE-2026-41576	2026-05-9 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1598	5.3	MEDIUM Network	-	-	Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's expression evaluation engine makes it possible for a malici…	CWE-94 Code Injection	CVE-2026-41645	2026-05-9 00:58	2026-05-8	Show	GitHub Exploit DB Packet Storm

1599	5.5	MEDIUM Local	-	-	Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol runtime allows JavaScript templates to …	CWE-284 Improper Access Control	CVE-2026-41646	2026-05-9 00:58	2026-05-8	Show	GitHub Exploit DB Packet Storm

1600	8.5	HIGH Network	-	-	n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. In versions 2.47.4 through 2.47.13, the SDK embedder path (N8NDocumentationMCPServer…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42449	2026-05-9 00:57	2026-05-8	Show	GitHub Exploit DB Packet Storm