Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2491 7.5 重要
Network 		Wireshark Wireshark Wiresharkにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-7379 2026-05-7 12:01 2026-04-30 Show GitHub Exploit DB Packet Storm
2492 6.1 警告
Network 		dragonexpert Recent Threads on Index dragonexpertのRecent Threads on Indexにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25309 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
2493 6.4 警告
Local 		レッドハット Web Terminal レッドハットのWeb Terminalにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-57853 2026-05-7 12:01 2026-04-8 Show GitHub Exploit DB Packet Storm
2494 8.5 重要
Network 		オラクル Oracle Life Sciences Empirica Signal オラクルのOracle Life Sciences Empirica Signalにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-21997 2026-05-7 12:01 2026-04-21 Show GitHub Exploit DB Packet Storm
2495 9.8 緊急
Network 		Arc53 DocsGPT Arc53のDocsGPTにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-26015 2026-05-7 12:01 2026-04-29 Show GitHub Exploit DB Packet Storm
2496 5.5 警告
Local 		レッドハット
Sequoia PGP		 rpm-sequoia
Red Hat Hardened Images
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-2625 2026-05-7 12:01 2026-04-3 Show GitHub Exploit DB Packet Storm
2497 10 緊急
Network 		scoder Lupa scoderのLupaにおける複数の脆弱性 CWE-284
CWE-639
CVE-2026-34444 2026-05-7 12:01 2026-04-6 Show GitHub Exploit DB Packet Storm
2498 4.7 警告
Local 		Moritz Andre Myrseth (moritzmyrz) coursevault-preview Moritz Andre Myrseth (moritzmyrz)のcoursevault-previewにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35613 2026-05-7 12:01 2026-04-7 Show GitHub Exploit DB Packet Storm
2499 7.8 重要
Local 		wkentaro gdown wkentaroのgdownにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40491 2026-05-7 12:01 2026-04-18 Show GitHub Exploit DB Packet Storm
2500 7.4 重要
Network 		Skim-rs Skim Skim-rsのSkimにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41414 2026-05-7 12:01 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2001 - - - Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow … - CVE-2025-35979 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2002 - - - Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… CWE-20
 Improper Input Validation  		CVE-2025-35990 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2003 - - - Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure. System software adversary with a privileged user combined with … CWE-665
 Improper Initialization 		CVE-2025-35991 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2004 - - - Improper buffer restrictions for some Display Virtualization for Windows OS driver software within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an authen… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2025-36510 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2005 - - - Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an auth… CWE-427
 Uncontrolled Search Path Element 		CVE-2025-36515 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2006 - - - Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… CWE-276
Incorrect Default Permissions  		CVE-2026-20718 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2007 - - - Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adve… CWE-822
 Untrusted Pointer Dereference 		CVE-2026-20738 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2008 - - - Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary wi… CWE-125
Out-of-bounds Read 		CVE-2026-20751 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2009 - - - Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable l… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-20753 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
2010 - - - Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combin… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-20754 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm