Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2901	7.8	重要 Local	Tryton	proteus	Labcenter ElectronicsのProteusにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-5494	2026-04-30 12:12	2026-04-11	Show	GitHub Exploit DB Packet Storm

2902	7.8	重要 Local	Tryton	proteus	Labcenter ElectronicsのProteusにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-5495	2026-04-30 12:12	2026-04-11	Show	GitHub Exploit DB Packet Storm

2903	7.8	重要 Local	Tryton	proteus	Labcenter ElectronicsのProteusにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-5496	2026-04-30 12:12	2026-04-11	Show	GitHub Exploit DB Packet Storm

2904	6.6	警告 Local	Veeam	one	サムスンのOneにおける入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2026-6839	2026-04-30 12:11	2026-04-22	Show	GitHub Exploit DB Packet Storm

2905	5.3	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不適切な動作順序（早期増幅）に関する脆弱性	CWE-408 不適切な動作順序（早期増幅）	CVE-2026-41331	2026-04-30 12:11	2026-04-21	Show	GitHub Exploit DB Packet Storm

2906	9.8	緊急 Network	thinkphp	thinkphp	thinkphpにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2018-25270	2026-04-30 12:11	2026-04-22	Show	GitHub Exploit DB Packet Storm

2907	9.8	緊急 Network	jizhicms	JIZHICMS	jizhicmsのJIZHICMSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-50229	2026-04-30 12:11	2026-04-23	Show	GitHub Exploit DB Packet Storm

2908	9.1	緊急 Network	p2r3	bareiron	p2r3のbareironにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-69808	2026-04-30 12:11	2026-03-16	Show	GitHub Exploit DB Packet Storm

2909	9.8	緊急 Network	p2r3	bareiron	p2r3のbareironにおける任意の場所に任意の値を書き込み可能な状態に関する脆弱性	CWE-123 任意の場所に任意の値を書き込み可能な状態	CVE-2025-69809	2026-04-30 12:11	2026-03-16	Show	GitHub Exploit DB Packet Storm

2910	7.5	重要 Network	NLTK	NLTK	NLTKにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-0847	2026-04-30 12:11	2026-03-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1611	9.1	CRITICAL Network	-	-	The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. The DELETE /storage/{object_name:path} endpoint lacks authentica…	CWE-552 Files or Directories Accessible to External Parties	CVE-2026-31216	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1612	9.8	CRITICAL Network	-	-	The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code execution. When a user …	CWE-94 Code Injection	CVE-2026-31217	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1613	8.8	HIGH Network	-	-	The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function t…	CWE-94 Code Injection	CVE-2026-31225	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1614	9.8	CRITICAL Network	-	-	The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities. The vulnerabi…	CWE-78 OS Command	CVE-2026-31226	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1615	9.8	CRITICAL Network	-	-	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe ev…	CWE-94 Code Injection	CVE-2026-31228	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1616	9.8	CRITICAL Network	-	-	Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a C…	CWE-416 Use After Free	CVE-2026-45185	2026-05-14 00:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1617	9.8	CRITICAL Network	-	-	The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerability (CWE-502). The s…	CWE-502 Deserialization of Untrusted Data	CVE-2026-31214	2026-05-14 00:51	2026-05-13	Show	GitHub Exploit DB Packet Storm

1618	8.0	HIGH Network	-	-	An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2023-27753	2026-05-14 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

1619	5.4	MEDIUM Network	-	-	An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2023-30059	2026-05-14 00:48	2026-05-13	Show	GitHub Exploit DB Packet Storm

1620	6.5	MEDIUM Network	-	-	GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project execution, when the system…	CWE-78 OS Command	CVE-2026-31246	2026-05-14 00:47	2026-05-12	Show	GitHub Exploit DB Packet Storm