Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4771	9.1	緊急 Network	Canonical	LXD	CanonicalのLXDにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-34178	2026-04-24 11:30	2026-04-9	Show	GitHub Exploit DB Packet Storm

4772	9.1	緊急 Network	Canonical	LXD	CanonicalのLXDにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-34179	2026-04-24 11:30	2026-04-9	Show	GitHub Exploit DB Packet Storm

4773	5.4	警告 Network	Docmost	Docmost	Docmostにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-34212	2026-04-24 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

4774	5.4	警告 Network	Docmost	Docmost	Docmostにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-34213	2026-04-24 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

4775	6.5	警告 Network	オラクル	PeopleSoft Enterprise HCM Absence Management	オラクルのPeopleSoft Enterprise HCM Absence Managementにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-34266	2026-04-24 11:30	2026-04-21	Show	GitHub Exploit DB Packet Storm

4776	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34267	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4777	6.1	警告 Network	オラクル	PeopleSoft Enterprise PeopleTools	オラクルのPeopleSoft Enterprise PeopleToolsにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-34269	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4778	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34270	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4779	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34271	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

4780	6.5	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-34272	2026-04-24 11:29	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
261	6.5	MEDIUM Network	splunk	ai_toolkit	In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted through `srchFilter` configurations… Update	CWE-863 Incorrect Authorization	CVE-2026-20238	2026-05-26 21:45	2026-05-21	Show	GitHub Exploit DB Packet Storm

262	3.8	LOW Network	-	-	This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out ma… New	CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation	CVE-2026-44410	2026-05-26 19:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

263	7.8	HIGH Local	-	-	MediaArea MediaInfoLib ID3v2 parsing heap buffer overflow vulnerability New	CWE-122 Heap-based Buffer Overflow	CVE-2026-25713	2026-05-26 19:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

264	7.8	HIGH Local	-	-	MediaArea MediaInfoLib LXF parsing heap-based buffer overflow vulnerability New	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2026-25104	2026-05-26 19:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

265	7.5	HIGH Network	-	-	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core… New	CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')	CVE-2026-39661	2026-05-26 18:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

266	5.3	MEDIUM Network	-	-	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: from n/a through 1.7. New	CWE-80 Basic XSS	CVE-2026-39642	2026-05-26 18:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

267	6.5	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS. This issue affects Geo Mashup: from n/a through 1.13.18. New	CWE-79 Cross-site Scripting	CVE-2026-27427	2026-05-26 18:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

268	4.3	MEDIUM Network	-	-	Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121. New	CWE-862 Missing Authorization	CVE-2026-24638	2026-05-26 18:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

269	5.3	MEDIUM Network	-	-	Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey… New	CWE-862 Missing Authorization	CVE-2026-24590	2026-05-26 18:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

270	7.5	HIGH Network	-	-	The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw t… New	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-8047	2026-05-26 17:16	2026-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed