Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4211 7.5 重要
Network 		Apache Software Foundation skywalking Apache Software Foundationのskywalkingにおけるデータクエリからの重要な情報の漏えいに関する脆弱性 CWE-202
データクエリからの重要な情報の漏えい 		CVE-2026-30778 2026-04-21 10:50 2026-04-15 Show GitHub Exploit DB Packet Storm
4212 7.5 重要
Network 		Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-31987 2026-04-21 10:50 2026-04-16 Show GitHub Exploit DB Packet Storm
4213 4.8 警告
Network 		OpenClaw OpenClaw OpenClawにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-32018 2026-04-21 10:50 2026-03-19 Show GitHub Exploit DB Packet Storm
4214 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-32019 2026-04-21 10:50 2026-03-19 Show GitHub Exploit DB Packet Storm
4215 7.1 重要
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-32035 2026-04-21 10:50 2026-03-19 Show GitHub Exploit DB Packet Storm
4216 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 CWE-122
CWE-362
CWE-367
CVE-2026-32093 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
4217 7.3 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Hyper-V のリモートでコードが実行される脆弱性 CWE-122
CWE-191
CWE-20
CVE-2026-32149 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
4218 7 重要
Local 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows Function Discovery Service (fdwsd.dll) の特権昇格の脆弱性 CWE-362
競合状態 		CVE-2026-32150 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
4219 6.5 警告
Network 		マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft … 		Windows シェルの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-32151 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
4220 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Windows 10 22h2
Microsoft Windows&… 		Windows Speech Runtime の特権の昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32153 2026-04-21 10:50 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 7.5 HIGH
Network 		- - Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoi… New CWE-22
Path Traversal 		CVE-2021-47942 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
392 9.8 CRITICAL
Network 		- - libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_… New CWE-415
 Double Free 		CVE-2020-37239 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
393 6.4 MEDIUM
Network 		- - NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the title parameter in the news additio… New CWE-79
Cross-site Scripting 		CVE-2020-37236 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
394 6.2 MEDIUM
Local 		- - Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying oversized input. Attackers can … New CWE-120
Classic Buffer Overflow 		CVE-2020-37234 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
395 7.8 HIGH
Local 		- - Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Atta… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37231 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
396 7.8 HIGH
Local 		- - Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37230 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
397 7.8 HIGH
Local 		- - OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unqu… New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37229 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
398 9.8 CRITICAL
Network 		- - iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retr… New CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-37228 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
399 4.3 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with Guest … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-13874 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm
400 5.4 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject … CWE-94
Code Injection 		CVE-2025-12669 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm