Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1311	6.8	警告 Physics	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21021	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

1312	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-Other その他	CVE-2026-21022	2026-05-15 10:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

1313	6.1	警告 Network	ヒューレット・パッカード・エンタープライズ	HPE Aruba Networking AOS-CX	ヒューレット・パッカード・エンタープライズのHPE Aruba Networking AOS-CXにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-23817	2026-05-15 10:53	2026-03-11	Show	GitHub Exploit DB Packet Storm

1314	5.4	警告 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-28819	2026-05-15 10:53	2026-05-11	Show	GitHub Exploit DB Packet Storm

1315	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-28846	2026-05-15 10:53	2026-05-11	Show	GitHub Exploit DB Packet Storm

1316	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28872	2026-05-15 10:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

1317	4.3	警告 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28901	2026-05-15 10:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

1318	7.5	重要 Network	アップル	visionos iOS iPadOS	アップルのiPadOS等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2026-28906	2026-05-15 10:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

1319	3.3	低 Local		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28910	2026-05-15 10:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

1320	4.3	警告 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-28917	2026-05-15 10:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2031	7.3	HIGH Network	-	-	YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5 and 3.2.12, the thread posting and reply feature accepts user-supplied content via a a post or reply that is stored server-side and…	CWE-79 CWE-80 CWE-116 Cross-site Scripting Basic XSS Improper Encoding or Escaping of Output	CVE-2026-43939	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2032	6.5	MEDIUM Network	-	-	requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features. Prior to , the SSRF protection in requests-hardened fails to block IP addr…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42175	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2033	-		-	-	DevGuard provides vulnerability management for the full software supply chain. Prior to 1.2.2, the SessionMiddleware accepts a client-supplied X-Admin-Token HTTP request header and uses its raw strin…	CWE-288 Authentication Bypass Using an Alternate Path or Channel	CVE-2026-42300	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2034	-		-	-	Fides is an open-source privacy engineering platform. From 2.75.0 to before 2.83.2, Fides deployments that enable both subject identity verification and duplicate privacy request detection are affect…	CWE-288 CWE-306 CWE-841 Authentication Bypass Using an Alternate Path or Channel Missing Authentication for Critical Function Improper Enforcement of Behavioral Workflow	CVE-2026-42303	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2035	4.3	MEDIUM Network	-	-	Kubewarden is a policy engine for Kubernetes. Prior to , An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions (which isn't the default) can craft a policy that makes…	CWE-862 Missing Authorization	CVE-2026-42541	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2036	8.8	HIGH Network	-	-	AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed i…	CWE-79 CWE-94 CWE-1188 Cross-site Scripting Code Injection Insecure Default Initialization of Resource	CVE-2026-43892	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2037	7.5	HIGH Network	-	-	phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a by…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-44167	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2038	8.2	HIGH Network	-	-	ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target private IP address …	CWE-184 CWE-918 Incomplete Blacklist Server-Side Request Forgery (SSRF)	CVE-2026-43929	2026-05-14 03:24	2026-05-13	Show	GitHub Exploit DB Packet Storm

2039	3.8	LOW Network	hono	hono	Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows to…	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-44459	2026-05-14 03:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

2040	9.1	CRITICAL Network	-	-	Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and …	CWE-287 CWE-697 Improper Authentication Incorrect Comparison	CVE-2026-44196	2026-05-14 03:21	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed