Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215821 5.4 警告 tradingandinvesting4u - Android 用 Bond Trading アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4901 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215822 5.4 警告 mig - Android 用 migme アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4900 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215823 5.4 警告 Magzter Inc. - Android 用 Indian Cement Review アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4899 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215824 5.4 警告 upasanhar - Android 用 Harivijay アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4898 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215825 5.4 警告 Magzter Inc. - Android 用 Touriosity Travelmag アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4897 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215826 5.4 警告 mobileappspartner - Android 用 Parque Imperial アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4896 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215827 5.4 警告 herpin time radio project - Android 用 Herpin Time Radio アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4895 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215828 5.4 警告 mymetro project - Android 用 MyMetro アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4894 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215829 5.4 警告 ucontrol - Android 用 uControl Smart Home Automation アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4892 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215830 5.4 警告 ctihub - Android 用 CT iHub アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4891 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1631 6.3 MEDIUM
Network 		- - A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of the argument email_i… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9542 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1632 5.3 MEDIUM
Network 		- - A vulnerability was identified in vllm-project vllm 0.19.0. This issue affects some unknown processing of the component OpenAI-compatible Serving Path. Such manipulation leads to denial of service. I… New CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-9540 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1633 5.3 MEDIUM
Local 		- - A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgread Utility. Performing a manipul… New CWE-119
CWE-122
Incorrect Access of Indexable Resource ('Range Error') 
Heap-based Buffer Overflow 		CVE-2026-9500 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1634 7.5 HIGH
Network 		- - Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSp… New CWE-1333
CWE-400
 Inefficient Regular Expression Complexity
 Uncontrolled Resource Consumption 		CVE-2026-9496 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1635 7.3 HIGH
Network 		- - Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to the middleware being silently dropped from the execution chain when the router prefix … New CWE-284
Improper Access Control 		CVE-2026-9495 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1636 5.7 MEDIUM
Network 		- - Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF). This issue affects Zoho Mail wordpress plugin versions before 1.6.2. New CWE-352
 Origin Validation Error 		CVE-2026-8174 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1637 - - - A heap-based buffer overflow vulnerability exists in XML parser functionality in the HiDraw. An authenticated malicious user with local access can exploit this vulnerability using a specially crafted… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-7310 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm
1638 5.9 MEDIUM
Network 		- - Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing … Update CWE-295
Improper Certificate Validation  		CVE-2026-48249 2026-05-26 23:16 2026-05-22 Show GitHub Exploit DB Packet Storm
1639 5.9 MEDIUM
Network 		- - Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to false (and not setting CURLOPT_SSL_VERIFYHOST) when issuing outbound H… Update CWE-295
Improper Certificate Validation  		CVE-2026-48248 2026-05-26 23:16 2026-05-22 Show GitHub Exploit DB Packet Storm
1640 4.1 MEDIUM
Network 		- - When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Comp… New CWE-89
SQL Injection 		CVE-2026-48136 2026-05-26 23:16 2026-05-26 Show GitHub Exploit DB Packet Storm