Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3811 6.5 警告
Network 		Discourse Discourse Discourseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-68666 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3812 5.4 警告
Network 		Discourse Discourse Discourseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-68933 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3813 6.5 警告
Network 		Discourse Discourse Discourseにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-68934 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3814 6.5 警告
Network 		WPDeveloper Essential Addons for Elementor WPDeveloperのWordPress用Essential Addons for Elementorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-69092 2026-02-2 19:39 2025-12-30 Show GitHub Exploit DB Packet Storm
3815 6.5 警告
Network 		Discourse Discourse Discourseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-69218 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3816 5.4 警告
Network 		Discourse Discourse Discourseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-69289 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3817 6.5 警告
Network 		GPAC GPAC GPACにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2025-70299 2026-02-2 19:39 2026-01-15 Show GitHub Exploit DB Packet Storm
3818 7.5 重要
Network 		GPAC GPAC GPACにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2025-70307 2026-02-2 19:39 2026-01-15 Show GitHub Exploit DB Packet Storm
3819 9.1 緊急
Network 		ruoyi ruoyi ruoyiにおける複数の脆弱性 CWE-284
CWE-862
CVE-2025-70985 2026-02-2 19:39 2026-01-23 Show GitHub Exploit DB Packet Storm
3820 7.5 重要
Network 		ruoyi ruoyi ruoyiにおける複数の脆弱性 CWE-284
CWE-862
CVE-2025-70986 2026-02-2 19:39 2026-01-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
151 8.8 HIGH
Network 		- - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40357 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
152 5.5 MEDIUM
Local 		- - Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally. New CWE-552
 Files or Directories Accessible to External Parties 		CVE-2026-35440 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
153 8.8 HIGH
Network 		- - Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-35439 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
154 8.3 HIGH
Network 		- - Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. New CWE-862
 Missing Authorization 		CVE-2026-35438 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
155 8.8 HIGH
Local 		- - Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. New CWE-1220
 Insufficient Granularity of Access Control 		CVE-2026-35436 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
156 7.3 HIGH
Local 		- - Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally. New CWE-20
CWE-190
 Improper Input Validation 
 Integer Overflow or Wraparound 		CVE-2026-35433 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
157 4.3 MEDIUM
Network 		- - User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. New CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-35429 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
158 7.5 HIGH
Network 		- - Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. New CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-35424 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
159 5.4 MEDIUM
Network 		- - Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network. New CWE-125
Out-of-bounds Read 		CVE-2026-35423 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
160 6.5 MEDIUM
Network 		- - Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network. New CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-35422 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm