Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250121 6.9 警告 lttng - LTTng Userspace Tracer の usttrace における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3386 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250122 6.9 警告 herac - TuxGuitar における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3385 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250123 6.9 警告 Bernhard Wymann - TORCS の torcs などのスクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3384 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250124 6.9 警告 TeamSpeak Systems GmbH - TeamSpeak の teamspeak スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3383 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250125 6.9 警告 uoregon - TAU の tauex における権限を取得される脆弱性 CWE-DesignError
CVE-2010-3382 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250126 6.9 警告 alex launi - Tangerine の tangerine スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3381 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250127 6.9 警告 Lawrence Livermore National Laboratory (LLNL) - SLURM の init.d/slurm スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3380 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250128 6.9 警告 scilab - Scilab の scilab スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3378 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250129 6.9 警告 salome-platform - SALOME の runSalome スクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3377 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250130 6.9 警告 CERN - ROOT の proofserv などのスクリプトにおける権限を取得される脆弱性 CWE-DesignError
CVE-2010-3376 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1181 6.2 MEDIUM
Local 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 2… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-28977 2026-05-14 23:01 2026-05-12 Show GitHub Exploit DB Packet Storm
1182 5.3 MEDIUM
Local 		vim vim Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick… CWE-78
OS Command  		CVE-2026-44656 2026-05-14 22:59 2026-05-9 Show GitHub Exploit DB Packet Storm
1183 5.3 MEDIUM
Network 		python urllib3 urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=Fa… CWE-200
NVD-CWE-noinfo
Information Exposure 		CVE-2026-44431 2026-05-14 22:56 2026-05-14 Show GitHub Exploit DB Packet Storm
1184 4.4 MEDIUM
Local 		vim vim Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a cr… CWE-78
OS Command  		CVE-2026-42307 2026-05-14 22:55 2026-05-9 Show GitHub Exploit DB Packet Storm
1185 5.3 MEDIUM
Network 		redwoodjs redwoodsdk RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version 1.2.3, server actions in rwsdk apply HTTP method enforcement but no origin validation. A request originating… CWE-352
 Origin Validation Error 		CVE-2026-42190 2026-05-14 22:54 2026-05-9 Show GitHub Exploit DB Packet Storm
1186 7.2 HIGH
Network 		claris filemaker_cloud A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operat… CWE-94
Code Injection 		CVE-2026-43680 2026-05-14 22:53 2026-05-13 Show GitHub Exploit DB Packet Storm
1187 7.2 HIGH
Network 		claris filemaker_cloud A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External OD… CWE-78
OS Command  		CVE-2026-43685 2026-05-14 22:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1188 7.5 HIGH
Network 		python urllib3 urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) c… CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification) 		CVE-2026-44432 2026-05-14 22:49 2026-05-14 Show GitHub Exploit DB Packet Storm
1189 5.9 MEDIUM
Network 		haxx curl A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SM… CWE-295
CWE-319
Improper Certificate Validation 
Cleartext Transmission of Sensitive Information 		CVE-2026-4873 2026-05-14 22:45 2026-05-13 Show GitHub Exploit DB Packet Storm
1190 5.4 MEDIUM
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when s… CWE-436
 Interpretation Conflict 		CVE-2026-44576 2026-05-14 22:44 2026-05-14 Show GitHub Exploit DB Packet Storm