Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
851 6.2 警告
Local
アップル tvOS
iOS
watchOS
visionos
iPadOS
アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-43666 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
852 7.5 重要
Network
アップル tvOS
iOS
watchOS
visionos
iPadOS
アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-43668 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
853 5.5 警告
Local
jqlang jq jqlangのjqにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-43894 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
854 4.4 警告
Local
jqlang jq jqlangのjqにおける複数の脆弱性 CWE-158
CWE-20
CVE-2026-43895 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
855 5.5 警告
Local
jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-43896 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
856 8.1 重要
Network
Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-43913 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
857 9.8 緊急
Network
Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-43914 2026-05-15 10:58 2026-05-11 Show GitHub Exploit DB Packet Storm
858 8.1 重要
Network
Pocket ID Pocket ID Pocket IDにおける複数の脆弱性 CWE-285
CWE-613
CVE-2026-43983 2026-05-15 10:58 2026-05-12 Show GitHub Exploit DB Packet Storm
859 7.5 重要
Network
protobufjs project protobufjs protobufjs projectのprotobufjsにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-44289 2026-05-15 10:58 2026-05-13 Show GitHub Exploit DB Packet Storm
860 7.5 重要
Network
protobufjs project protobufjs protobufjs projectのprotobufjsにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)
CVE-2026-44290 2026-05-15 10:58 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1231 - - - Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Andro… CWE-200
Information Exposure
CVE-2026-0245 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1232 - - - A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on ma… CWE-862
 Missing Authorization
CVE-2026-0246 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1233 - - - Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations. CWE-306
Missing Authentication for Critical Function
CVE-2026-0247 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1234 - - - An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By pr… CWE-295
Improper Certificate Validation 
CVE-2026-0248 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1235 - - - Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint… CWE-295
Improper Certificate Validation 
CVE-2026-0249 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1236 - - - A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with S… CWE-787
 Out-of-bounds Write
CVE-2026-0250 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1237 - - - Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS an… CWE-426
 Untrusted Search Path
CVE-2026-0251 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1238 - - - A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store a JavaScript payload using the web interface. This … CWE-79
Cross-site Scripting
CVE-2026-0256 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1239 - - - Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized … CWE-565
 Reliance on Cookies without Validation and Integrity Checking
CVE-2026-0257 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1240 - - - A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the firewall to send network requests… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-0258 2026-05-15 01:21 2026-05-14 Show GitHub Exploit DB Packet Storm