Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219291 5 警告 シスコシステムズ - Cisco IOS XR の DHCPv6 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3271 2014-05-21 15:14 2014-05-20 Show GitHub Exploit DB Packet Storm
219292 5 警告 シスコシステムズ - Cisco IOS XR の DHCPv6 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3270 2014-05-21 15:13 2014-05-20 Show GitHub Exploit DB Packet Storm
219293 6.8 警告 シスコシステムズ - Cisco IOS XE の SNMP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3269 2014-05-21 15:12 2014-05-19 Show GitHub Exploit DB Packet Storm
219294 5 警告 シスコシステムズ - Cisco Unified Border Element デバイス上で稼動する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3268 2014-05-21 15:11 2014-05-19 Show GitHub Exploit DB Packet Storm
219295 4.3 警告 シスコシステムズ - Cisco Security Manager の Auto Update Server の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3265 2014-05-21 15:10 2014-05-19 Show GitHub Exploit DB Packet Storm
219296 6.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3264 2014-05-21 15:09 2014-05-19 Show GitHub Exploit DB Packet Storm
219297 5 警告 シスコシステムズ - 複数の Cisco WebEx 製品の meetinginfo.do における重要なミーティング情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-2199 2014-05-21 15:08 2014-05-15 Show GitHub Exploit DB Packet Storm
219298 4.3 警告 シスコシステムズ - 複数の Cisco セキュリティ アプライアンス上で稼働する Cisco AsyncOS におけるロールの権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2195 2014-05-21 15:07 2014-05-20 Show GitHub Exploit DB Packet Storm
219299 6.8 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における脆弱性 CWE-20
不適切な入力確認
CVE-2014-2194 2014-05-21 15:06 2014-05-19 Show GitHub Exploit DB Packet Storm
219300 4.3 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における会話テキストを挿入される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2193 2014-05-21 15:05 2014-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2181 8.8 HIGH
Network
- - Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System … CWE-94
Code Injection
CVE-2025-15024 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2182 - - - CVAT is an open source interactive video and image annotation tool for computer vision. From 2.5.0 to 2.63.0, an attacker who is able to create or edit an annotation guide on a task is able to add ma… CWE-80
Basic XSS
CVE-2026-44369 2026-05-15 03:19 2026-05-14 Show GitHub Exploit DB Packet Storm
2183 - - - Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support (@Notification… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-44308 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2184 - - - Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixe… CWE-79
Cross-site Scripting
CVE-2026-44371 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2185 7.5 HIGH
Network
- - Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability in DateTime decoding. A… CWE-789
 Memory Allocation with Excessive Size Value
CVE-2026-44375 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2186 9.6 CRITICAL
Network
- - soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support. Prior to 0.1.8, a track title containing an HTML payload executed locally in the Electron app… CWE-20
CWE-79
CWE-94
CWE-862
 Improper Input Validation 
Cross-site Scripting
Code Injection
 Missing Authorization
CVE-2026-44482 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2187 7.4 HIGH
Network
- - Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a v… CWE-613
 Insufficient Session Expiration
CVE-2026-44511 2026-05-15 03:19 2026-05-15 Show GitHub Exploit DB Packet Storm
2188 8.8 HIGH
Network
arubanetworks arubaos
sd-wan
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo… CWE-77
Command Injection
CVE-2026-44867 2026-05-15 03:19 2026-05-13 Show GitHub Exploit DB Packet Storm
2189 6.5 MEDIUM
Network
open5gs open5gs A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argu… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8292 2026-05-15 03:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2190 6.5 MEDIUM
Network
open5gs open5gs A weakness has been identified in Open5GS up to 2.7.7. Impacted is the function ogs_nnrf_nfm_handle_nf_profile of the file lib/sbi/nnrf-handler.c of the component NRF. This manipulation causes denial… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-8291 2026-05-15 03:19 2026-05-12 Show GitHub Exploit DB Packet Storm