Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
851 7.8 重要
Local 		マイクロソフト Kiota マイクロソフトのKiotaにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41134 2026-05-18 12:05 2026-04-22 Show GitHub Exploit DB Packet Storm
852 8.2 重要
Network 		Kata Containers Confidential Containers
Kata Containers 		Kata ContainersのConfidential Containers等の複数製品におけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー 		CVE-2026-41326 2026-05-18 12:05 2026-04-24 Show GitHub Exploit DB Packet Storm
853 8.4 重要
Local 		opentelemetry OpenTelemetry eBPF Instrumentation opentelemetryのOpenTelemetry eBPF Instrumentationにおける複数の脆弱性 CWE-22
CWE-59
CVE-2026-41433 2026-05-18 12:05 2026-04-24 Show GitHub Exploit DB Packet Storm
854 5.3 警告
Network 		RedwoodSDK RedwoodSDK RedwoodjsのRedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-42190 2026-05-18 12:05 2026-05-8 Show GitHub Exploit DB Packet Storm
855 7.2 重要
Network 		FileMaker, Inc Claris FileMaker Cloud Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker Cloudにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-43680 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
856 7.2 重要
Network 		FileMaker, Inc Claris FileMaker Cloud Claris International Inc. (旧 FileMaker, Inc)のClaris FileMaker CloudにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-43685 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
857 6.5 警告
Network 		Shellhub Shellhub Shellhubにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44426 2026-05-18 12:05 2026-05-13 Show GitHub Exploit DB Packet Storm
858 9.8 緊急
Network 		Yarbo Lawn Mower Pro Firmware
Lawn Mower Firmware 		YarboのLawn Mower Firmware等の複数製品における非公開の機能に関する脆弱性 CWE-912
CWE-noinfo
CVE-2026-7413 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
859 9.8 緊急
Network 		Yarbo Lawn Mower Pro Firmware
Lawn Mower Firmware 		YarboのLawn Mower Firmware等の複数製品におけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-7414 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
860 9.8 緊急
Network 		Yarbo Lawn Mower Pro Firmware
Lawn Mower Firmware 		YarboのLawn Mower Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-7415 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1651 8.8 HIGH
Network 		azuracast azuracast AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware unconditionally trusts the client-supplied X-Forwarded-Host HTTP header with… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2026-42606 2026-05-15 02:31 2026-05-10 Show GitHub Exploit DB Packet Storm
1652 5.1 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allo… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62305 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1653 5.1 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details,… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62308 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1654 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2025-62309 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1655 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized … CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-62310 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1656 4.3 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized a… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2025-62311 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1657 3.0 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse,… CWE-522
 Insufficiently Protected Credentials 		CVE-2025-62312 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1658 5.4 MEDIUM
Adjacent 		- - HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized … CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2025-62313 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1659 2.3 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based securi… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2025-62316 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm
1660 2.6 LOW
Adjacent 		- - HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary syst… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2025-62317 2026-05-15 02:22 2026-05-15 Show GitHub Exploit DB Packet Storm