Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4881 7 重要
Local
マイクロソフト Microsoft Windows Server 2019
Microsoft Windows 10 1607
Microsoft Windows Server 2016
Microsoft Windows 11 23h2
Microsoft …
Microsoft Resilient File System の特権昇格の脆弱性 CWE-362
CWE-416
CVE-2026-32091 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
4882 7.8 重要
Local
マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows Server 2025
Microsoft Wind…
デスクトップ ウィンドウ マネージャーの特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-32155 2026-04-23 10:13 2026-04-14 Show GitHub Exploit DB Packet Storm
4883 7.5 重要
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-32228 2026-04-23 10:13 2026-04-18 Show GitHub Exploit DB Packet Storm
4884 3.7
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-32690 2026-04-23 10:13 2026-04-18 Show GitHub Exploit DB Packet Storm
4885 7.8 重要
Local
Curtis Galloway libexif Libexif ProjectのLibexifにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー
CVE-2026-32775 2026-04-23 10:13 2026-03-16 Show GitHub Exploit DB Packet Storm
4886 3.1
Network
Weblate Weblate Weblateにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-33212 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
4887 4.3 警告
Network
Weblate Weblate Weblateにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-33214 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
4888 6.8 警告
Network
Weblate Weblate Weblateにおける複数の脆弱性 CWE-200
CWE-22
CVE-2026-33220 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
4889 8 重要
Network
Weblate Weblate Weblateにおける複数の脆弱性 CWE-23
CWE-434
CWE-94
CVE-2026-33435 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
4890 5 警告
Network
Weblate Weblate Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-33440 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
91 10.0 CRITICAL
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-pfdmanagement route group without inbound OAuth2/bearer-token authorization. A network a… New CWE-863
 Incorrect Authorization
CVE-2026-44330 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
92 10.0 CRITICAL
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network at… New CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization
CVE-2026-44329 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
93 8.2 HIGH
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. On top of that, the DELETE /upi… New CWE-306
CWE-476
CWE-862
Missing Authentication for Critical Function
 NULL Pointer Dereference
 Missing Authorization
CVE-2026-44328 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
94 10.0 CRITICAL
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the nnef-oam route group without inbound OAuth2/bearer-token authorization. A network attacker wh… New CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization
CVE-2026-44327 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
95 9.4 CRITICAL
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-traffic-influence API without inbound OAuth2/bearer-token authorization. A network attac… New CWE-862
 Missing Authorization
CVE-2026-44326 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
96 7.5 HIGH
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NRF root SBI endpoint POST /oauth2/token contains a parser-level type-confusion bug family. The handler in N… New CWE-20
CWE-755
CWE-843
 Improper Input Validation 
 Improper Handling of Exceptional Conditions
Type Confusion
CVE-2026-44325 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
97 6.5 MEDIUM
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… New CWE-704
CWE-754
 Incorrect Type Conversion or Cast
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-44324 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
98 4.3 MEDIUM
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… New CWE-476
 NULL Pointer Dereference
CVE-2026-44323 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
99 7.5 HIGH
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF PATCH /3gpp-pfd-management/v1/{afId}/transactions/{transId}/applications/{appId} handler panics with a n… New CWE-476
CWE-754
 NULL Pointer Dereference
 Improper Check for Unusual or Exceptional Conditions
CVE-2026-44322 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
100 7.5 HIGH
Network
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's SMF mounts the UPI management route group without inbound OAuth2 middleware. The POST /upi/v1/upNodesLinks c… New CWE-306
CWE-617
CWE-862
Missing Authentication for Critical Function
 Reachable Assertion
 Missing Authorization
CVE-2026-44321 2026-05-28 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm