Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4231 4.3 警告
Network
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows シェルのスプーフィングの脆弱性 CWE-693
保護メカニズムの不具合
CVE-2026-32202 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4232 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
ユニバーサル プラグ アンド プレイ (upnp.dll) の情報漏えいの脆弱性 CWE-269
CWE-59
CVE-2026-32212 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4233 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
ユニバーサル プラグ アンド プレイ (upnp.dll) の情報漏えいの脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-32214 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4234 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 1809
Microsoft Wind…
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32215 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4235 5.5 警告
Local
マイクロソフト Microsoft Windows 11 26h1 Windows リダイレクト ドライブ バッファリング システムのサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-32216 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4236 5.5 警告
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32217 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4237 5.5 警告
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&…
Windows カーネルの情報漏えいの脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-32218 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4238 7 重要
Local
マイクロソフト Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-415
CVE-2026-32219 2026-04-21 10:49 2026-04-14 Show GitHub Exploit DB Packet Storm
4239 9.8 緊急
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33082 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
4240 8.8 重要
Network
DataEase DataEase DataEaseにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33083 2026-04-21 10:49 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
381 5.3 MEDIUM
Network
- - A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file h2o-core/src/main/java/water/persist/PersistNFS.java of the component ImportFi… New CWE-200
CWE-284
Information Exposure
Improper Access Control
CVE-2026-8750 2026-05-17 20:16 2026-05-17 Show GitHub Exploit DB Packet Storm
382 6.3 MEDIUM
Network
- - A weakness has been identified in Z-BlogPHP 1.7.4.3430. This affects the function CheckComment of the file zb_system/function/c_system_event.php of the component Commend Approval Handler. This manipu… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-8747 2026-05-17 20:16 2026-05-17 Show GitHub Exploit DB Packet Storm
383 3.1 LOW
Network
- - A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet Handler. Such manip… New CWE-362
Race Condition
CVE-2026-8741 2026-05-17 18:16 2026-05-17 Show GitHub Exploit DB Packet Storm
384 6.3 MEDIUM
Network
- - A vulnerability was found in Investintech SlimPDFReader up to 2.0.13. Affected by this vulnerability is the function sub_3B4610 of the file SlimPDFReader.exe. The manipulation results in stack-based … New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-8733 2026-05-17 14:16 2026-05-17 Show GitHub Exploit DB Packet Storm
385 7.3 HIGH
Network
- - A weakness has been identified in CoreWorxLab CAAL up to 1.6.0. The affected element is an unknown function of the file src/caal/webhooks.py of the component test-hass Endpoint. This manipulation cau… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-8725 2026-05-17 11:16 2026-05-17 Show GitHub Exploit DB Packet Storm
386 4.7 MEDIUM
Network
- - A security flaw has been discovered in Dataease 2.10.20. Impacted is the function SqlparserUtils.transFilter of the file SqlparserUtils.java of the component Data Dashboard. The manipulation results … New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8724 2026-05-17 11:16 2026-05-17 Show GitHub Exploit DB Packet Storm
387 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6050 2026-05-17 08:16 2026-05-17 Show GitHub Exploit DB Packet Storm
388 8.2 HIGH
Local
- - Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash. New CWE-346
 Origin Validation Error
CVE-2026-46728 2026-05-17 07:16 2026-05-17 Show GitHub Exploit DB Packet Storm
389 8.2 HIGH
Network
- - EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers… New CWE-89
SQL Injection
CVE-2021-47956 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
390 9.8 CRITICAL
Network
- - python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. … New CWE-94
Code Injection
CVE-2021-47952 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm