Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2761	3.7	低 Network	Smallstep	Step CA	SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40097	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

2762	8.2	重要 Network	Saltcorn	Saltcorn	Saltcornにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40163	2026-04-28 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

2763	6.1	警告 Network	AdonisJS	adonisjs/http-server AdonisJS Core	AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-40255	2026-04-28 10:11	2026-04-16	Show	GitHub Exploit DB Packet Storm

2764	9.3	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける複数の脆弱性	CWE-20 CWE-269	CVE-2026-40317	2026-04-28 10:11	2026-04-18	Show	GitHub Exploit DB Packet Storm

2765	9	緊急 Local	MinecAnton209	NovumOS	MinecAnton209のNovumOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-40572	2026-04-28 10:10	2026-04-18	Show	GitHub Exploit DB Packet Storm

2766	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年04月23日）	-	-	2026-04-27 13:37	2026-04-24	Show	GitHub Exploit DB Packet Storm

2767	7.8	重要 Local	Giskard	Giskard	Giskardにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-40320	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2768	7.5	重要 Network	monetr	monetr	monetrにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-40481	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2769	5.5	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40515	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

2770	6.3	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40516	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1431	-	-	-	Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an auth… Update	CWE-427 Uncontrolled Search Path Element	CVE-2025-36515	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1432	-	-	-	Incorrect default permissions for some Intel(R) NPU Driver software installers before version 32.0.100.4511 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… Update	CWE-276 Incorrect Default Permissions	CVE-2026-20718	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1433	-	-	-	Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adve… Update	CWE-822 Untrusted Pointer Dereference	CVE-2026-20738	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1434	-	-	-	Out-of-bounds read for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary wi… Update	CWE-125 Out-of-bounds Read	CVE-2026-20751	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1435	-	-	-	Integer overflow in the UEFI firmware for the Slim Bootloader may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable l… Update	CWE-190 Integer Overflow or Wraparound	CVE-2026-20753	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1436	-	-	-	Improper conditions check in some firmware for some Intel(R) NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combin… Update	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-20754	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1437	-	-	-	Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalation of privilege. Unpr… Update	CWE-427 Uncontrolled Search Path Element	CVE-2026-20772	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1438	-	-	-	Buffer overflow for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow an escalation of privilege. System software adversar… Update	CWE-120 Classic Buffer Overflow	CVE-2026-20794	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1439	-	-	-	Out-of-bounds write for the Intel(R) Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary w… Update	CWE-787 Out-of-bounds Write	CVE-2026-20879	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1440	-	-	-	Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an unauthenticated user co… Update	CWE-284 Improper Access Control	CVE-2026-20887	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm