Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
901 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8189 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
902 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8190 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
903 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8191 2026-05-15 10:56 2026-05-9 Show GitHub Exploit DB Packet Storm
904 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8192 2026-05-15 10:55 2026-05-9 Show GitHub Exploit DB Packet Storm
905 6.5 警告
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける不適切に制御された順次メモリ割り当てに関する脆弱性 CWE-1325
不適切に制御された順次メモリ割り当て
CVE-2026-8199 2026-05-15 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
906 8.8 重要
Network
MongoDB Inc. MongoDB MongoDB Inc.のMongoDBにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-8201 2026-05-15 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
907 7.5 重要
Network
Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース
CVE-2026-8223 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
908 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8227 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
909 8.8 重要
Network
WAVLINK WL-NU516U1 ファームウェア WAVLINKのWL-NU516U1 ファームウェアにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-8228 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
910 6.5 警告
Network
Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース
CVE-2026-8249 2026-05-15 10:55 2026-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 9.9 CRITICAL
Network
nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery (SSRF) by creating a cluster node pointing to an arbitra… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44015 2026-05-14 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1322 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally. CWE-284
Improper Access Control
CVE-2026-33834 2026-05-14 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1323 7.8 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free
CVE-2026-33835 2026-05-14 23:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1324 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. CWE-122
Heap-based Buffer Overflow
CVE-2026-33837 2026-05-14 23:46 2026-05-13 Show GitHub Exploit DB Packet Storm
1325 7.8 HIGH
Local
microsoft windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2012
windows_server_2016
w…
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. CWE-415
 Double Free
CVE-2026-33838 2026-05-14 23:45 2026-05-13 Show GitHub Exploit DB Packet Storm
1326 7.0 HIGH
Local
microsoft windows_10_1809
windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2019
windows_server_2022
windows_server_2022_…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. CWE-362
Race Condition
CVE-2026-33839 2026-05-14 23:44 2026-05-13 Show GitHub Exploit DB Packet Storm
1327 7.8 HIGH
Local
microsoft windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2025
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. CWE-416
 Use After Free
CVE-2026-33840 2026-05-14 23:43 2026-05-13 Show GitHub Exploit DB Packet Storm
1328 7.8 HIGH
Local
microsoft windows_10_21h2
windows_10_22h2
windows_11_23h2
windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022
windows_server_2022_23h2
windows_server_2025
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. CWE-122
Heap-based Buffer Overflow
CVE-2026-33841 2026-05-14 23:42 2026-05-13 Show GitHub Exploit DB Packet Storm
1329 7.5 HIGH
Network
apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data. CWE-284
Improper Access Control
CVE-2026-43652 2026-05-14 23:33 2026-05-12 Show GitHub Exploit DB Packet Storm
1330 7.5 HIGH
Network
apple ipados
iphone_os
macos
tvos
visionos
watchos
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-43654 2026-05-14 23:32 2026-05-12 Show GitHub Exploit DB Packet Storm