Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4451	9.8	緊急 Network	WWBN	AVideo	WWBNのAVideoにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41304	2026-04-27 10:46	2026-04-22	Show	GitHub Exploit DB Packet Storm

4452	4.3	警告 Network	pretix	pretix	pretix GmbHのpretixにおける隔離または分類に関する脆弱性	CWE-653 不適切な隔離または分類	CVE-2026-5600	2026-04-27 10:46	2026-04-8	Show	GitHub Exploit DB Packet Storm

4453	7.2	重要 Network	mintplexlabs	anythingllm	mintplexlabsのanythingllmにおけるパストラバーサルの脆弱性	CWE-29 パストラバーサル (/../filename)	CVE-2026-5627	2026-04-27 10:46	2026-04-7	Show	GitHub Exploit DB Packet Storm

4454	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6919	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

4455	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-6920	2026-04-27 10:45	2026-04-23	Show	GitHub Exploit DB Packet Storm

4456	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-6921	2026-04-27 10:45	2026-04-23	Show	GitHub Exploit DB Packet Storm

4457	-	-	三菱電機	MELSEC iQ-F FX5-EIP形EtherNet/IPユニット MELSEC iQ-Fシリーズ FX5-ENET/IP形Ethernetユニット	MELSEC iQ-FシリーズのEtherNet/IPユニットおよびEthernetユニットのEthernet機能における複数の脆弱性	CWE-404 CWE-670	CVE-2026-1874 CVE-2026-1875 CVE-2026-1876	2026-04-24 17:45	2026-03-3	Show	GitHub Exploit DB Packet Storm

4458	5.4	警告 Network	Apache Software Foundation	Apache ActiveMQ Apache ActiveMQ MQTT	Apache ActiveMQシリーズにおけるMQTTパケット検証不備の脆弱性［AMQ-9810］	CWE-Other その他	CVE-2025-66168 CVE-2026-40046	2026-04-24 12:11	2026-03-4	Show	GitHub Exploit DB Packet Storm

4459	9.1	緊急 Network	oauth2_proxy project	oauth2_proxy	oauth2_proxy projectのoauth2_proxyにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-34457	2026-04-24 11:44	2026-04-14	Show	GitHub Exploit DB Packet Storm

4460	5.9	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-34511	2026-04-24 11:44	2026-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351	7.5	HIGH Network	nvidia	tensorrt_llm	NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference. A successful exploit of this vulnerability might lead …	CWE-690 Unchecked Return Value to NULL Pointer Dereference	CVE-2026-24160	2026-05-21 22:09	2026-05-20	Show	GitHub Exploit DB Packet Storm

352	9.8	CRITICAL Network	nvidia	tensorrt_llm	NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successful exploit of this vulnerability might lead to code executio…	CWE-502 Deserialization of Untrusted Data	CVE-2025-33255	2026-05-21 09:06	2026-05-20	Show	GitHub Exploit DB Packet Storm

353	9.8	CRITICAL Network	nvidia	tensorrt_llm	NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and i…	CWE-502 Deserialization of Untrusted Data	CVE-2026-24142	2026-05-21 09:04	2026-05-20	Show	GitHub Exploit DB Packet Storm

354	-		-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2026-8399	2026-05-21 08:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

355	3.1	LOW Network	emqx	emqx	A vulnerability has been found in EMQX up to 6.2.0. This affects an unknown function of the file apps/emqx/src/emqx_persistent_session_ds.erl of the component QoS 2 PUBLISH Packet Handler. Such manip…	CWE-362 Race Condition	CVE-2026-8741	2026-05-21 08:02	2026-05-17	Show	GitHub Exploit DB Packet Storm

356	8.1	HIGH Network	microsoft	malware_protection_engine	Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.	CWE-122 Heap-based Buffer Overflow	CVE-2026-45584	2026-05-21 03:56	2026-05-20	Show	GitHub Exploit DB Packet Storm

357	7.8	HIGH Local	microsoft	windows_admin_center	Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.	CWE-59 Link Following	CVE-2026-42834	2026-05-21 03:29	2026-05-20	Show	GitHub Exploit DB Packet Storm

358	9.8	CRITICAL Network	-	-	Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15.	CWE-862 Missing Authorization	CVE-2026-8495	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

359	5.4	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr…	CWE-79 Cross-site Scripting	CVE-2026-8493	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

360	2.7	LOW Network	-	-	Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.…	CWE-471 Modification of Assumed-Immutable Data (MAID)	CVE-2026-8492	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed