Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3281	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34276	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3282	6.6	警告 Network	オラクル	PeopleSoft Enterprise PeopleTools	オラクルのPeopleSoft Enterprise PeopleToolsにおける複数の脆弱性	CWE-284 CWE-400	CVE-2026-34277	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3283	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34278	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3284	6.5	警告 Network	オラクル	Peoplesoft Enterprise HCM Human Resources	オラクルのPeoplesoft Enterprise HCM Human Resourcesにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34280	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3285	6.5	警告 Local	オラクル	Oracle Solaris	オラクルのOracle Solarisにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34281	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3286	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34285	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3287	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34286	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3288	9.1	緊急 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34287	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3289	5.9	警告 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34288	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

3290	5.9	警告 Network	オラクル	Oracle Identity Manager Connector	オラクルのOracle Identity Manager Connectorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34289	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
971	8.1	HIGH Network	-	-	Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/s… New	CWE-78 OS Command	CVE-2026-30635	2026-05-14 00:46	2026-05-12	Show	GitHub Exploit DB Packet Storm

972	8.8	HIGH Network	-	-	EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient… New	CWE-77 Command Injection	CVE-2026-36734	2026-05-14 00:46	2026-05-12	Show	GitHub Exploit DB Packet Storm

973	7.3	HIGH Network	-	-	An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function New	CWE-94 Code Injection	CVE-2026-37630	2026-05-14 00:46	2026-05-12	Show	GitHub Exploit DB Packet Storm

974	3.2	LOW Local	-	-	Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. New	CWE-312 Cleartext Storage of Sensitive Information	CVE-2026-45362	2026-05-14 00:46	2026-05-12	Show	GitHub Exploit DB Packet Storm

975	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: through 7.8.10.1. New	CWE-862 Missing Authorization	CVE-2026-25431	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

976	-		-	-	Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. The endpoint is designed to execute arbitrary Python code provided by the user,… New	-	CVE-2026-31231	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

977	-		-	-	Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validator packages via guardrails hub install, the system retrieve… New	-	CVE-2026-31233	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

978	-		-	-	Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication… New	-	CVE-2026-31234	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

979	-		-	-	The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize … New	-	CVE-2026-31235	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm

980	8.8	HIGH Network	snorkel	snorkel	The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler mo… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-31223	2026-05-14 00:46	2026-05-13	Show	GitHub Exploit DB Packet Storm