Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3241	7.5	重要 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35230	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3242	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35234	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3243	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35235	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3244	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35236	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3245	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35237	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3246	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35238	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3247	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35239	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3248	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35240	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3249	7.5	重要 Local	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35242	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

3250	7.5	重要 Network	オラクル	Oracle VM VirtualBox	オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35245	2026-04-24 11:43	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1321	-		-	-	Ray is an AI compute engine. From version 2.54.0 to before version 2.55.0, Ray Data registers custom Arrow extension types (ray.data.arrow_tensor, ray.data.arrow_tensor_v2, ray.data.arrow_variable_sh…	CWE-94 CWE-502 Code Injection Deserialization of Untrusted Data	CVE-2026-41486	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1322	8.1	HIGH Network	-	-	OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applica…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-41883	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1323	7.5	HIGH Network	-	-	locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to regist…	CWE-79 CWE-346 Cross-site Scripting Origin Validation Error	CVE-2026-41886	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1324	5.5	MEDIUM Network	-	-	People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted in…	CWE-269 Improper Privilege Management	CVE-2026-42185	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1325	9.8	CRITICAL Network	-	-	Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRE…	CWE-1392 Use of Default Credentials	CVE-2026-42072	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1326	6.5	MEDIUM Network	-	-	nova-toggle-5 enables fliping booleans in the index. Prior to version 1.3.0, the toggle endpoint (POST/nova-vendor/nova-toggle/toggle/{resource}/{resourceId}) was protected only by web + auth:<guard>…	CWE-285 Improper Authorization	CVE-2026-42202	2026-05-14 01:34	2026-05-9	Show	GitHub Exploit DB Packet Storm

1327	2.4	LOW Network	-	-	Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Prior to 2.9.3, a server-side request forgery (SSRF) vulnerability exists in Geyser’s handling of Bedrock player hea…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42188	2026-05-14 01:32	2026-05-12	Show	GitHub Exploit DB Packet Storm

1328	-		-	-	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before…	CWE-79 Cross-site Scripting	CVE-2026-42338	2026-05-14 01:32	2026-05-13	Show	GitHub Exploit DB Packet Storm

1329	-		-	-	AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. In AutoGPT, the execution process is recorded to the c…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2025-32425	2026-05-14 01:32	2026-05-14	Show	GitHub Exploit DB Packet Storm

1330	8.8	HIGH Network	-	-	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed…	CWE-88 CWE-602 Argument Injection Client-Side Enforcement of Server-Side Security	CVE-2026-42266	2026-05-14 01:32	2026-05-14	Show	GitHub Exploit DB Packet Storm