Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4191 6.5 警告
Network 		Christian Neukirchen Rack Rackにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合 		CVE-2026-32762 2026-04-22 10:09 2026-04-2 Show GitHub Exploit DB Packet Storm
4192 6.1 警告
Network 		Streetwriters Notesnook Mobile StreetwritersのNotesnook Mobileにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33978 2026-04-22 10:09 2026-04-1 Show GitHub Exploit DB Packet Storm
4193 8.1 重要
Network 		OpenProject OpenProject OpenProjectにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-34717 2026-04-22 10:09 2026-04-2 Show GitHub Exploit DB Packet Storm
4194 6.5 警告
Network 		Web Technologies Change Detection Web TechnologiesのChange Detectionにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-35000 2026-04-22 10:09 2026-04-1 Show GitHub Exploit DB Packet Storm
4195 9.1 緊急
Network 		rti RTI Connext Professional rtiのRTI Connext ProfessionalにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2026-4374 2026-04-22 10:09 2026-04-1 Show GitHub Exploit DB Packet Storm
4196 5.3 警告
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-0398 2026-04-21 10:51 2026-02-9 Show GitHub Exploit DB Packet Storm
4197 3.6 低
Local 		ARM Ltd. Arm C1-Pro ファームウェア ARM Ltd.のArm C1-Pro ファームウェアにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-0995 2026-04-21 10:51 2026-03-2 Show GitHub Exploit DB Packet Storm
4198 8.1 重要
Network 		Grafana Labs Grafana Grafana LabsのGrafanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-21721 2026-04-21 10:51 2026-01-27 Show GitHub Exploit DB Packet Storm
4199 5.3 警告
Network 		Grafana Labs Loki Grafana LabsのLokiにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-21726 2026-04-21 10:51 2026-04-15 Show GitHub Exploit DB Packet Storm
4200 3.3 低
Network 		Grafana Labs Grafana Grafana LabsのGrafanaにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-21727 2026-04-21 10:51 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 4.3 MEDIUM
Network 		- - A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message Handler. This manipulation causes null p… New CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference 		CVE-2026-8782 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
352 4.3 MEDIUM
Network 		- - A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer de… New CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference 		CVE-2026-8781 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
353 4.3 MEDIUM
Network 		- - A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation … New CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-8780 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
354 4.3 MEDIUM
Network 		- - A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement ca… New CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-8779 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
355 6.3 MEDIUM
Network 		- - A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulatio… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-8777 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
356 8.8 HIGH
Network 		- - A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulati… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-8776 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
357 8.8 HIGH
Network 		- - A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TP… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-8775 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
358 6.3 MEDIUM
Network 		- - A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation of the argument command… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-8774 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
359 - - - Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the metasploitPostgreSQL service the subseque… New CWE-284
CWE-427
CWE-829
Improper Access Control
 Uncontrolled Search Path Element
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-7373 2026-05-18 11:16 2026-05-15 Show GitHub Exploit DB Packet Storm
360 4.7 MEDIUM
Network 		- - A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the function backup/load of the file litemall-db/src/main/java/org/linlinjava/litemall… New CWE-74
CWE-88
Injection
Argument Injection 		CVE-2026-8773 2026-05-18 09:16 2026-05-18 Show GitHub Exploit DB Packet Storm