Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
91 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2026-31428 2026-05-22 10:55 2026-04-13 Show GitHub Exploit DB Packet Storm
92 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-31429 2026-05-22 10:55 2026-04-20 Show GitHub Exploit DB Packet Storm
93 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-31434 2026-05-22 10:55 2026-04-22 Show GitHub Exploit DB Packet Storm
94 6.5 警告
Network 		struktur AG libheif struktur AGのlibheifにおける複数の脆弱性 New CWE-125
CWE-476
CVE-2026-32738 2026-05-22 10:55 2026-05-19 Show GitHub Exploit DB Packet Storm
95 6.5 警告
Network 		struktur AG libheif struktur AGのlibheifにおける無限ループに関する脆弱性 New CWE-835
無限ループ 		CVE-2026-32739 2026-05-22 10:55 2026-05-19 Show GitHub Exploit DB Packet Storm
96 8.8 重要
Network 		struktur AG libheif struktur AGのlibheifにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-32740 2026-05-22 10:55 2026-05-19 Show GitHub Exploit DB Packet Storm
97 7.5 重要
Network 		アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento 		アドビのAdobe Commerce等の複数製品における不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-34645 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
98 7.5 重要
Network 		アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento 		アドビのAdobe Commerce等の複数製品における不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-34646 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
99 7.4 重要
Network 		アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento 		アドビのAdobe Commerce等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34647 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
100 7.5 重要
Network 		アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento 		アドビのAdobe Commerce等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-34648 2026-05-22 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311671 8.8 HIGH
Network 		adobe commerce
magento
commerce_b2b 		Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a… NVD-CWE-noinfo
CVE-2024-45148 2024-10-16 22:27 2024-10-10 Show GitHub Exploit DB Packet Storm
311672 9.8 CRITICAL
Network 		ivanti avalanche Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication. CWE-22
Path Traversal 		CVE-2024-47009 2024-10-16 22:26 2024-10-9 Show GitHub Exploit DB Packet Storm
311673 7.5 HIGH
Network 		ivanti avalanche Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-47008 2024-10-16 22:24 2024-10-9 Show GitHub Exploit DB Packet Storm
311674 7.5 HIGH
Network 		ivanti avalanche A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service. CWE-476
 NULL Pointer Dereference 		CVE-2024-47007 2024-10-16 22:23 2024-10-9 Show GitHub Exploit DB Packet Storm
311675 6.7 MEDIUM
Local 		microsoft windows_server_2012
windows_10_1507
windows_server_2016
windows_server_2022_23h2
windows_10_1809
windows_server_2022
windows_11_21h2
windows_10_21h2
windows_10_22h2
windows… 		Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2024-37983 2024-10-16 22:15 2024-10-9 Show GitHub Exploit DB Packet Storm
311676 9.8 CRITICAL
Network 		alisonic sibylla_firmware Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database. CWE-89
SQL Injection 		CVE-2024-8630 2024-10-16 22:15 2024-09-28 Show GitHub Exploit DB Packet Storm
311677 7.5 HIGH
Network 		opentext cx-e_voice Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system. CWE-22
Path Traversal 		CVE-2023-7260 2024-10-16 21:53 2024-08-23 Show GitHub Exploit DB Packet Storm
311678 - - - There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This … - CVE-2024-9858 2024-10-16 18:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311679 - - - A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead… CWE-1270
 Generation of Incorrect Security Tokens 		CVE-2023-32188 2024-10-16 18:15 2024-10-16 Show GitHub Exploit DB Packet Storm
311680 - - - A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider (AP). This characteristic also applies t… - CVE-2023-22650 2024-10-16 18:15 2024-10-16 Show GitHub Exploit DB Packet Storm