Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1401 8.8 重要
Network 		マイクロソフト Visual Studio Code GitHub Copilot と Visual Studio Code セキュリティ機能バイパスの脆弱性 CWE-74
インジェクション 		CVE-2026-41109 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
1402 7.4 重要
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-41132 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
1403 6.1 警告
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41255 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
1404 9.8 緊急
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41293 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
1405 5 警告
Local 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-200
CWE-59
CWE-79
CWE-79
CVE-2026-41610 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
1406 3.3 低
Local 		マイクロソフト Visual Studio Code Visual Studio Code のリモートでコードが実行される脆弱性 CWE-77
CWE-79
CWE-80
CVE-2026-41611 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1407 8.8 重要
Network 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-384
CWE-384
CWE-78
CVE-2026-41613 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1408 7.4 重要
Network 		マイクロソフト Microsoft Authenticator Microsoft Authenticator の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-41615 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
1409 6.5 警告
Network 		Distribution Distribution Distributionにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41888 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
1410 7.5 重要
Network 		Signal K Signal K Server Signal KのSignal K Serverにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-41893 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311471 - - - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to bypass the authorization mechanisms for specific file management functions. This… - CVE-2024-20476 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311472 - - - A vulnerability in the logging component of Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an authenticated, remote attacker to view sensitive inform… CWE-200
Information Exposure 		CVE-2024-20457 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311473 - - - A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive info… CWE-200
Information Exposure 		CVE-2024-20445 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311474 - - - A vulnerability in the web-based management interface of Cisco Unified Industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) Access Points could allow an unauthenticated, rem… CWE-77
Command Injection 		CVE-2024-20418 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311475 - - - A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management in… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2024-20371 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311476 - - - Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - CVE-2024-10827 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311477 - - - Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security s… - CVE-2024-10826 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311478 7.5 HIGH
Network 		- - A disclosure of sensitive information flaw was found in foreman via the GraphQL API. If the introspection feature is enabled, it is possible for attackers to retrieve sensitive admin authentication k… CWE-200
Information Exposure 		CVE-2024-6861 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311479 5.4 MEDIUM
Network 		- - IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript … CWE-79
Cross-site Scripting 		CVE-2024-35146 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm
311480 - - - CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user fro… - CVE-2024-10082 2024-11-7 03:17 2024-11-7 Show GitHub Exploit DB Packet Storm