Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
111 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025 		Windows DWM Core ライブラリの特権の昇格の脆弱性 New CWE-122
CWE-190
CVE-2026-42896 2026-05-18 12:13 2026-05-12 Show GitHub Exploit DB Packet Storm
112 9.9 緊急
Network 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-42898 2026-05-18 12:13 2026-05-12 Show GitHub Exploit DB Packet Storm
113 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 New CWE-415
二重解放 		CVE-2026-43097 2026-05-18 12:13 2026-05-6 Show GitHub Exploit DB Packet Storm
114 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-Other
その他 		CVE-2026-43098 2026-05-18 12:13 2026-05-6 Show GitHub Exploit DB Packet Storm
115 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43285 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
116 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43290 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
117 8.3 重要
Adjacent 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2026-43291 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
118 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43292 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
119 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43293 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
120 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43294 2026-05-18 12:13 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311901 - - - Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file. - CVE-2024-45870 2024-10-4 22:50 2024-10-4 Show GitHub Exploit DB Packet Storm
311902 - - - Zohocorp ManageEngine Analytics Plus versions before 5410 and Zoho Analytics On-Premise versions before 5410 are vulnerable to Path traversal. - CVE-2024-9100 2024-10-4 22:50 2024-10-4 Show GitHub Exploit DB Packet Storm
311903 - - - The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is… - CVE-2024-5803 2024-10-4 22:50 2024-10-4 Show GitHub Exploit DB Packet Storm
311904 - - - async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustio… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2024-47614 2024-10-4 22:50 2024-10-4 Show GitHub Exploit DB Packet Storm
311905 - - - Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including authenticating as them. - CVE-2024-9313 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311906 - - - A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a Cross-Site Request Forgery (CSRF) in the login flow. - CVE-2024-42504 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311907 6.4 MEDIUM
Local 		- - Deep Freeze 9.00.020.5760 is vulnerable to an out-of-bounds read vulnerability by triggering the 0x70014 IOCTL code of the FarDisk.sys driver. CWE-125
Out-of-bounds Read 		CVE-2024-8159 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311908 - - - Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API a… CWE-863
 Incorrect Authorization 		CVE-2024-47616 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311909 - - - A potential security vulnerability has been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege. HP is releasing software updates to mitigate this… - CVE-2024-8733 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311910 - - - Contao 5.4.1 allows an authenticated admin account to upload a SVG file containing malicious javascript code into the target system. If the file is accessed through the website, it could lead to a Cr… - CVE-2024-45965 2024-10-4 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm