Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4591	6.5	警告 Network	Canonical	Juju	CanonicalのJujuにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2025-68153	2026-04-22 10:10	2026-04-3	Show	GitHub Exploit DB Packet Storm

4592	9.8	緊急 Network	lfprojects	mlflow	lfprojectsのmlflowにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-0545	2026-04-22 10:10	2026-04-3	Show	GitHub Exploit DB Packet Storm

4593	7.5	重要 Network	budibase	budibase	budibaseにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-25043	2026-04-22 10:10	2026-04-3	Show	GitHub Exploit DB Packet Storm

4594	6.5	警告 Network	Christian Neukirchen	Rack	RackにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-26962	2026-04-22 10:09	2026-04-2	Show	GitHub Exploit DB Packet Storm

4595	6.1	警告 Network	Progress Software Corporation	Flowmon	Progress Software CorporationのFlowmonにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-2737	2026-04-22 10:09	2026-04-2	Show	GitHub Exploit DB Packet Storm

4596	6.5	警告 Network	Christian Neukirchen	Rack	Rackにおける解釈の競合に関する脆弱性	CWE-436 解釈の競合	CVE-2026-32762	2026-04-22 10:09	2026-04-2	Show	GitHub Exploit DB Packet Storm

4597	6.1	警告 Network	Streetwriters	Notesnook Mobile	StreetwritersのNotesnook Mobileにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-33978	2026-04-22 10:09	2026-04-1	Show	GitHub Exploit DB Packet Storm

4598	8.1	重要 Network	OpenProject	OpenProject	OpenProjectにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-34717	2026-04-22 10:09	2026-04-2	Show	GitHub Exploit DB Packet Storm

4599	6.5	警告 Network	Web Technologies	Change Detection	Web TechnologiesのChange Detectionにおける不完全なブラックリストに関する脆弱性	CWE-184 不完全なブラックリスト	CVE-2026-35000	2026-04-22 10:09	2026-04-1	Show	GitHub Exploit DB Packet Storm

4600	9.1	緊急 Network	rti	RTI Connext Professional	rtiのRTI Connext ProfessionalにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-4374	2026-04-22 10:09	2026-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
41	5.4	MEDIUM Network	-	-	Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… New	CWE-79 Cross-site Scripting	CVE-2026-48215	2026-05-22 03:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

42	5.4	MEDIUM Network	-	-	Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… New	CWE-79 Cross-site Scripting	CVE-2026-48214	2026-05-22 03:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

43	9.8	CRITICAL Network	-	-	Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resol… New	CWE-502 Deserialization of Untrusted Data	CVE-2026-48207	2026-05-22 03:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

44	-		-	-	LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsona… New	CWE-266 Incorrect Privilege Assignment	CVE-2026-48172	2026-05-22 03:16	2026-05-21	Show	GitHub Exploit DB Packet Storm

45	6.5	MEDIUM Network	-	-	Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HAPPY: from n/a through 1.0.10. New	CWE-862 Missing Authorization	CVE-2026-39593	2026-05-22 03:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

46	7.8	HIGH Local	-	-	MediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability New	CWE-122 Heap-based Buffer Overflow	CVE-2026-22554	2026-05-22 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

47	9.1	CRITICAL Network	scadabr	scadabr	In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA system and inject arbitrary sen… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-8602	2026-05-22 02:19	2026-05-20	Show	GitHub Exploit DB Packet Storm

48	9.8	CRITICAL Network	scadabr	scadabr	In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system. New	CWE-78 OS Command	CVE-2026-8603	2026-05-22 02:17	2026-05-20	Show	GitHub Exploit DB Packet Storm

49	8.8	HIGH Network	scadabr	scadabr	In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a malicious webpage. New	CWE-352 Origin Validation Error	CVE-2026-8604	2026-05-22 02:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

50	5.4	MEDIUM Network	-	-	Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value t… New	CWE-79 Cross-site Scripting	CVE-2026-48213	2026-05-22 02:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed