Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3821 7.7 重要
Network
Monospace Inc Directus Monospace IncのDirectusにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-35409 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3822 6.1 警告
Network
Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-184
CWE-601
CVE-2026-35410 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3823 4.3 警告
Network
Monospace Inc Directus Monospace IncのDirectusにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-35411 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3824 8.1 重要
Network
Monospace Inc Directus Monospace IncのDirectusにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-35412 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3825 5.3 警告
Network
Monospace Inc Directus Monospace IncのDirectusにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-35413 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3826 6.5 警告
Network
Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-35441 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3827 8.1 重要
Network
Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-200
CWE-863
CVE-2026-35442 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3828 9.1 緊急
Network
pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-35459 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
3829 9.9 緊急
Network
inventree project inventree inventree projectのinventreeにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化
CVE-2026-35477 2026-04-21 10:46 2026-04-8 Show GitHub Exploit DB Packet Storm
3830 8.1 重要
Network
inventree project inventree inventree projectのinventreeにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-35478 2026-04-21 10:45 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
521 7.5 HIGH
Network
apple ipados
iphone_os
macos
visionos
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may le… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-28944 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
522 4.3 MEDIUM
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS… New CWE-20
 Improper Input Validation 
CVE-2026-28917 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
523 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
watchos
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web cont… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-28913 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
524 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
visionos
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web con… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-28905 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
525 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS … New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-28904 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
526 4.3 MEDIUM
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously c… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-28901 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
527 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processin… New CWE-416
 Use After Free
CVE-2026-28883 2026-05-14 06:16 2026-05-12 Show GitHub Exploit DB Packet Storm
528 5.3 MEDIUM
Network
protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties ob… New CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-44292 2026-05-14 05:58 2026-05-14 Show GitHub Exploit DB Packet Storm
529 8.8 HIGH
Network
protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe expression derived f… New CWE-94
Code Injection
CVE-2026-44293 2026-05-14 05:56 2026-05-14 Show GitHub Exploit DB Packet Storm
530 5.3 MEDIUM
Network
protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript property accessors from schema-controlled field and oneof names. Cer… New CWE-20
 Improper Input Validation 
CVE-2026-44294 2026-05-14 05:55 2026-05-14 Show GitHub Exploit DB Packet Storm