Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2361 9.8 緊急
Network
BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-23781 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2362 7.5 重要
Network
BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-23782 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2363 9.9 緊急
Network
Doorman Doorman Doormanにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-30269 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
2364 7.5 重要
Network
PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server
PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-33257 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2365 7.5 重要
Network
PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server
PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-33260 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2366 8.8 重要
Network
litellm litellm LiteLLMにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル
CVE-2026-40217 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
2367 7.8 重要
Local
radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-40517 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
2368 6.7 警告
Local
The GnuPG Project Libgcrypt The GnuPG ProjectのLibgcryptにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-41989 2026-04-30 12:14 2026-04-23 Show GitHub Exploit DB Packet Storm
2369 9.8 緊急
Network
OFFIS DCMTK OFFISのDCMTKにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5663 2026-04-30 12:14 2026-04-6 Show GitHub Exploit DB Packet Storm
2370 5.5 警告
Local
Angry IP Scanner Angry IP Scanner Angry IP Scannerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2018-25262 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1641 7.5 HIGH
Network
- - A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This cou… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-22925 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1642 9.1 CRITICAL
Network
- - Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is author… CWE-79
Cross-site Scripting
CVE-2026-25786 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1643 7.5 HIGH
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command 
CVE-2025-40947 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1644 6.8 MEDIUM
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-88
Argument Injection
CVE-2025-40948 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1645 9.1 CRITICAL
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command 
CVE-2025-40949 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1646 9.1 CRITICAL
Network
- - Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker w… CWE-79
Cross-site Scripting
CVE-2026-25787 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1647 7.1 HIGH
Network
- - Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file… CWE-79
Cross-site Scripting
CVE-2026-25789 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1648 7.7 HIGH
Local
- - Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain… CWE-1188
 Insecure Default Initialization of Resource
CVE-2026-27662 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1649 7.3 HIGH
Network
- - A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All … CWE-79
Cross-site Scripting
CVE-2026-33862 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
1650 7.5 HIGH
Network
- - A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All … CWE-798
 Use of Hard-coded Credentials
CVE-2026-33893 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm