Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4161 4.1 警告
Network 		Weblate Weblate Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39845 2026-04-23 10:11 2026-04-15 Show GitHub Exploit DB Packet Storm
4162 5.9 警告
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-400
CWE-662
CVE-2026-39865 2026-04-23 10:11 2026-04-8 Show GitHub Exploit DB Packet Storm
4163 6.1 警告
Local 		jqlang jq jqlangのjqにおける複数の脆弱性 CWE-125
CWE-476
CWE-843
CVE-2026-39956 2026-04-23 10:11 2026-04-13 Show GitHub Exploit DB Packet Storm
4164 7.2 重要
Network 		citeum opencti citeumのopenctiにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 		CVE-2026-39980 2026-04-23 10:11 2026-04-9 Show GitHub Exploit DB Packet Storm
4165 6.1 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-39985 2026-04-23 10:11 2026-04-9 Show GitHub Exploit DB Packet Storm
4166 5.3 警告
Network 		Apache Software Foundation Apache Log4cxx Apache Software FoundationのApache Log4cxxにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-40023 2026-04-23 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
4167 4.8 警告
Network 		axios project axios axios projectのaxiosにおける複数の脆弱性 CWE-113
CWE-444
CWE-918
CVE-2026-40175 2026-04-23 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
4168 3.7 低
Network 		phpseclib phpseclib phpseclibにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-40194 2026-04-23 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
4169 7.5 重要
Network 		free5gc free5gc free5GCにおける複数の脆弱性 CWE-200
CWE-202
CWE-209
CVE-2026-40245 2026-04-23 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
4170 7.5 重要
Network 		free5gc free5gc free5GCにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40246 2026-04-23 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
541 4.3 MEDIUM
Network 		- - Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… CWE-693
 Protection Mechanism Failure 		CVE-2026-8563 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
542 4.3 MEDIUM
Network 		- - Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … CWE-20
 Improper Input Validation  		CVE-2026-8528 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
543 7.5 HIGH
Network 		- - An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-38728 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
544 8.2 HIGH
Network 		- - A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control fu… CWE-124
Buffer Underflow 		CVE-2026-34253 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
545 - - - An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticated attacker to disclose sensitive… CWE-862
 Missing Authorization 		CVE-2026-2031 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
546 6.5 MEDIUM
Network 		opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication fa… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-44195 2026-05-16 01:06 2026-05-14 Show GitHub Exploit DB Packet Storm
547 9.8 CRITICAL
Network 		apache tomcat Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0… CWE-20
 Improper Input Validation  		CVE-2026-41293 2026-05-16 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm
548 9.8 CRITICAL
Network 		apache tomcat DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… CWE-592
 DEPRECATED: Authentication Bypass Issues 		CVE-2026-43512 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
549 7.5 HIGH
Network 		espressif arduino-esp32 arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, the WebServer Digest authentication implementation in arduino-esp… CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42855 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm
550 7.5 HIGH
Network 		apache tomcat Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 … CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-43513 2026-05-16 00:53 2026-05-13 Show GitHub Exploit DB Packet Storm