Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3191	8.8	重要 Local	neutrinolabs	xrdp	neutrinolabsのxrdpにおける削除された特権に対する不適切なチェックに関する脆弱性	CWE-273 削除された特権に対する不適切なチェック	CVE-2026-32107	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3192	8.1	重要 Network	neutrinolabs	xrdp	neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-32623	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3193	6.5	警告 Network	neutrinolabs	xrdp	neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-32624	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3194	6.3	警告 Network	neutrinolabs	xrdp	neutrinolabsのxrdpにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-33145	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3195	9.1	緊急 Network	neutrinolabs	xrdp	neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33516	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3196	9.1	緊急 Network	neutrinolabs	xrdp	neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-33689	2026-04-28 10:13	2026-04-17	Show	GitHub Exploit DB Packet Storm

3197	2.9	低 Local	オラクル	Oracle GraalVM for JDK Oracle GraalVM JRE JDK	オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-34268	2026-04-28 10:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

3198	9.8	緊急 Network	オラクル	Oracle Advanced Inbound Telephony	オラクルのOracle Advanced Inbound Telephonyにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34275	2026-04-28 10:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

3199	7.5	重要 Network	オラクル	Oracle GraalVM for JDK Oracle GraalVM JRE JDK	オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34282	2026-04-28 10:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

3200	2.4	低 Network	オラクル	Oracle Database	オラクルのOracle Databaseにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34312	2026-04-28 10:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1461	10.0	CRITICAL Network	-	-	Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows a…	CWE-94 Code Injection	CVE-2026-42298	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1462	6.5	MEDIUM Network	-	-	Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check-Time-of-Use) vulner…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42346	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1463	8.9	HIGH Network	-	-	Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their ow…	CWE-79 Cross-site Scripting	CVE-2026-42556	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1464	-		-	-	Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P…	CWE-79 Cross-site Scripting	CVE-2026-42794	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1465	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42793	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1466	-		-	-	Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum…	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-43967	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1467	-		-	-	Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event/1 in cowlib guards…	CWE-93 CRLF Injection	CVE-2026-43968	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1468	-		-	-	Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cow_co…	CWE-93 CRLF Injection	CVE-2026-43969	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1469	-		-	-	Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number …	CWE-400 Uncontrolled Resource Consumption	CVE-2026-7790	2026-05-14 00:57	2026-05-12	Show	GitHub Exploit DB Packet Storm

1470	-		-	-	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel …	CWE-89 SQL Injection	CVE-2026-32687	2026-05-14 00:57	2026-05-13	Show	GitHub Exploit DB Packet Storm