Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3251	6.5	警告 Network	SAP	Manage Reference Structures	SAPのManage Reference Structuresにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-27679	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

3252	7.5	重要 Network	Mercurycom	MIPC252W Firmware	MercurycomのMIPC252W FirmwareにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31256	2026-05-7 11:30	2026-04-27	Show	GitHub Exploit DB Packet Storm

3253	4.9	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-31927	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3254	7.7	重要 Local	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおけるハードコードされた暗号鍵の使用に関する脆弱性	CWE-321 ハードコードされた暗号鍵の使用	CVE-2026-32324	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3255	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-32648	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3256	7.5	重要 Network	Anviz Global	Crosschex Standard	Anviz GlobalのCrosschex Standardにおけるアルゴリズムのダウングレードに関する脆弱性	CWE-757 アルゴリズムのダウングレード	CVE-2026-32650	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3257	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-33093	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3258	6.5	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-33569	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

3259	4.3	警告 Network	SAP	SAP HANA Database Explorer SAP HANA Cockpit	SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-34262	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

3260	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-35061	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2151	8.1	HIGH Network	-	-	e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l…	CWE-20 CWE-807 Improper Input Validation Reliance on Untrusted Inputs in a Security Decision	CVE-2026-43935	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2152	-		-	-	Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th…	CWE-552 CWE-918 Files or Directories Accessible to External Parties Server-Side Request Forgery (SSRF)	CVE-2026-40564	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2153	-		-	-	A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-2264	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2154	7.8	HIGH Local	-	-	NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec…	CWE-502 Deserialization of Untrusted Data	CVE-2026-24162	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2155	5.3	MEDIUM Network	-	-	IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the inst…	CWE-1392 Use of Default Credentials	CVE-2025-36221	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2156	4.3	MEDIUM Network	-	-	IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, …	CWE-89 SQL Injection	CVE-2025-36220	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2157	5.4	MEDIUM Network	-	-	IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo…	CWE-79 Cross-site Scripting	CVE-2025-36148	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2158	5.4	MEDIUM Network	-	-	IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions.	CWE-923 Improper Restriction of Communication Channel to Intended Endpoints	CVE-2025-36145	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2159	6.4	MEDIUM Network	-	-	IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows…	CWE-79 Cross-site Scripting	CVE-2025-36126	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2160	5.4	MEDIUM Network	-	-	IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). Th…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2025-14290	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm