Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1061 5.4 警告
Network
lfprojects MCP Registry lfprojectsのMCP Registryにおける複数の脆弱性 CWE-116
CWE-79
CVE-2026-44429 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
1062 4 警告
Network
lfprojects MCP Registry lfprojectsのMCP Registryにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44430 2026-05-18 11:22 2026-05-14 Show GitHub Exploit DB Packet Storm
1063 7.2 重要
Network
Ivanti Ivanti Virtual Traffic Manager (vTM) IvantiのIvanti Virtual Traffic Manager (vTM)におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-8051 2026-05-18 11:22 2026-05-12 Show GitHub Exploit DB Packet Storm
1064 5.4 警告
Network
Bitwarden Server BitwardenのServerにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-43638 2026-05-18 11:22 2026-05-11 Show GitHub Exploit DB Packet Storm
1065 9.1 緊急
Network
Bitwarden Server BitwardenのServerにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-43639 2026-05-18 11:22 2026-05-11 Show GitHub Exploit DB Packet Storm
1066 8.1 重要
Network
Bitwarden Server BitwardenのServerにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題
CVE-2026-43640 2026-05-18 11:21 2026-05-11 Show GitHub Exploit DB Packet Storm
1067 8.8 重要
Adjacent
エレコム株式会社
ロジテック株式会社
WAB-S1775
WSC-X1800GS-B
WRC-X6000QS-G
WMC-2LX2-B
WRC-X3000GS3-B
LAN-WH300ANDGPE
WRC-1900GHBK-A
WRC-1900GHBK-S
WRC-X1800GSH-B
LAN-WH300N/DR
WRC-1750GHBK2-I
WRC-600GHBK…
エレコム製およびロジテック製ネットワーク機器における複数の脆弱性 CWE-120
CWE-284
CWE-78
CWE-912
CVE-2023-32626
CVE-2023-35991
CVE-2023-38132
CVE-2023-38576
CVE-2023-39445
CVE-2023-39454
CVE-2023-39455
CVE-2023-39944
CVE-2023-40069
CVE-2023-40072
2026-05-15 19:26 2023-08-10 Show GitHub Exploit DB Packet Storm
1068 9.8 緊急
Network
キヤノンマーケティングジャパン株式会社 GUARDIANWALL Mailセキュリティ・クラウド
GUARDIANWALL MailSuite
GUARDIANWALL MailSuiteにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2026-32661 2026-05-15 15:37 2026-05-13 Show GitHub Exploit DB Packet Storm
1069 6.8 警告
Adjacent
エレコム株式会社 WRC-X3000GS2A-B
WRC-X6000XST-G
WRC-X3000GS2-W
WRC-X6000XS-G
WRC-X1800GSH-B
WRC-X1800GS-B
WRC-X3000GS2-B
WRC-X1800GSA-B
WRC-X3000GST2-B
WRC-X6000QSA-G
WRC-X1500GSA-B
W…
エレコム製無線 LAN ルーターにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2024-22372 2026-05-15 15:30 2024-01-23 Show GitHub Exploit DB Packet Storm
1070 8.8 重要
Adjacent
エレコム株式会社 WRC-2533GST2
WRC-1167GST2
WMC-X1800GST-B
WMC-2LX-B
WRC-G01-W
WSC-X1800GS-B
WRC-X3200GST3-B
エレコム製無線 LAN ルーターにおける複数の脆弱性 CWE-200
CWE-78
CVE-2024-25568
CVE-2024-26258
CVE-2024-29225
2026-05-15 15:30 2024-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1911 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack. CWE-121
Stack-based Buffer Overflow
CVE-2025-28344 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1912 7.5 HIGH
Network
- - striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons. CWE-121
Stack-based Buffer Overflow
CVE-2025-28343 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1913 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_SmartAudio::loop, AP_SmartAudio… CWE-121
Stack-based Buffer Overflow
CVE-2024-51395 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1914 6.2 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupilot rover commit v.c56439b045162058df0ff136afea3081fcd06d38 allows a local attacker to cause a denial of service via the AP_InertialSensor_ADIS1647x.cpp, ArduRo… CWE-120
CWE-121
Classic Buffer Overflow
Stack-based Buffer Overflow
CVE-2024-48519 2026-05-14 22:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1915 9.8 CRITICAL
Network
artica pandora_fms Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via graph container parameter. This issue affects Pandora FMS: from 777 through 800 CWE-89
SQL Injection
CVE-2026-34187 2026-05-14 22:05 2026-05-13 Show GitHub Exploit DB Packet Storm
1916 9.6 CRITICAL
Network
langflow langflow Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langflow is vulnerable to Path Traversal in the Knowledge Bases API (DELETE /api/v1/knowledge_bases). Th… CWE-22
Path Traversal
CVE-2026-42048 2026-05-14 21:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1917 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorizatio… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44575 2026-05-14 21:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1918 8.1 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to au… CWE-288
Authentication Bypass Using an Alternate Path or Channel
CVE-2026-44574 2026-05-14 21:37 2026-05-14 Show GitHub Exploit DB Packet Storm
1919 7.5 HIGH
Network
vercel next.js Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based au… CWE-863
 Incorrect Authorization
CVE-2026-44573 2026-05-14 21:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1920 7.5 HIGH
Network
protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2026-44290 2026-05-14 21:23 2026-05-14 Show GitHub Exploit DB Packet Storm