Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3811 5.7 警告
Network
Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外
CVE-2026-34944 2026-04-21 10:46 2026-04-9 Show GitHub Exploit DB Packet Storm
3812 6.5 警告
Network
Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り
CVE-2026-34945 2026-04-21 10:46 2026-04-9 Show GitHub Exploit DB Packet Storm
3813 7.5 重要
Network
Bytecode Alliance wasmtime Bytecode Allianceのwasmtimeにおける常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2026-34946 2026-04-21 10:46 2026-04-9 Show GitHub Exploit DB Packet Storm
3814 8.8 重要
Network
OpenFGA OpenFGA
Helm Charts
OpenFGAのHelm Charts等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-34972 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3815 9.8 緊急
Network
man d-tale Man GroupのD-Taleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
CWE-noinfo
CVE-2026-35052 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3816 5.4 警告
Network
GoHugo Hugo GoHugoのHugoにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-35166 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3817 6.5 警告
Network
Eugene Pankov Ajenti Eugene PankovのAjentiにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-35175 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3818 7.1 重要
Local
Vim Vim Vimにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-35177 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3819 7.7 重要
Network
pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-35187 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3820 7.5 重要
Network
saleor saleor saleorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-35401 2026-04-21 10:46 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
631 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerab… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-44579 2026-05-15 03:34 2026-05-14 Show GitHub Exploit DB Packet Storm
632 6.1 MEDIUM
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be… New CWE-79
Cross-site Scripting
CVE-2026-44580 2026-05-15 03:33 2026-05-14 Show GitHub Exploit DB Packet Storm
633 7.5 HIGH
Network
- - Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation. New CWE-253
 Incorrect Check of Function Return Value
CVE-2026-46419 2026-05-15 03:31 2026-05-14 Show GitHub Exploit DB Packet Storm
634 - - - Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL (via the web interface or the API). In affected versi… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44515 2026-05-15 03:31 2026-05-15 Show GitHub Exploit DB Packet Storm
635 6.5 MEDIUM
Network
- - Kubetail is a real-time logging dashboard for Kubernetes. Prior to 0.14.0, Kubetail's dashboard exposes WebSocket endpoints that did not adequately validate the Origin header on connection upgrade. A… New CWE-1385
 Missing Origin Validation in WebSockets
CVE-2026-44514 2026-05-15 03:31 2026-05-15 Show GitHub Exploit DB Packet Storm
636 8.6 HIGH
Network
- - Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints. New CWE-250
 Execution with Unnecessary Privileges
CVE-2026-29205 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm
637 8.2 HIGH
Network
- - SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials. New CWE-295
Improper Certificate Validation 
CVE-2026-32992 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm
638 4.3 MEDIUM
Network
- - In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL. New CWE-696
 Incorrect Behavior Order
CVE-2026-44919 2026-05-15 03:30 2026-05-14 Show GitHub Exploit DB Packet Storm
639 8.8 HIGH
Network
- - Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code bypass in DiffusionPipeline.from_pretrained allows arbitrary remote code execution despite the user p… New CWE-94
Code Injection
CVE-2026-44513 2026-05-15 03:30 2026-05-15 Show GitHub Exploit DB Packet Storm
640 8.8 HIGH
Network
- - Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines from Hu… New CWE-94
Code Injection
CVE-2026-44827 2026-05-15 03:30 2026-05-15 Show GitHub Exploit DB Packet Storm