Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1461	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43221	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1462	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43232	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1463	8.2	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-43233	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1464	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43234	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1465	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43235	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1466	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43236	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1467	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43237	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1468	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-43238	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1469	8.8	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43239	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1470	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-43250	2026-05-14 10:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1891	4.4	MEDIUM Local	vim	vim	Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a cr…	CWE-78 OS Command	CVE-2026-42307	2026-05-14 22:55	2026-05-9	Show	GitHub Exploit DB Packet Storm

1892	5.3	MEDIUM Network	redwoodjs	redwoodsdk	RedwoodSDK is a server-first React framework. From version 1.0.0-beta.50 to before version 1.2.3, server actions in rwsdk apply HTTP method enforcement but no origin validation. A request originating…	CWE-352 Origin Validation Error	CVE-2026-42190	2026-05-14 22:54	2026-05-9	Show	GitHub Exploit DB Packet Storm

1893	7.2	HIGH Network	claris	filemaker_cloud	A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule types and execute arbitrary operat…	CWE-94 Code Injection	CVE-2026-43680	2026-05-14 22:53	2026-05-13	Show	GitHub Exploit DB Packet Storm

1894	7.2	HIGH Network	claris	filemaker_cloud	A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsanitized input in the External OD…	CWE-78 OS Command	CVE-2026-43685	2026-05-14 22:52	2026-05-13	Show	GitHub Exploit DB Packet Storm

1895	7.5	HIGH Network	python	urllib3	urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) c…	CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)	CVE-2026-44432	2026-05-14 22:49	2026-05-14	Show	GitHub Exploit DB Packet Storm

1896	5.9	MEDIUM Network	haxx	curl	A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SM…	CWE-295 CWE-319 Improper Certificate Validation Cleartext Transmission of Sensitive Information	CVE-2026-4873	2026-05-14 22:45	2026-05-13	Show	GitHub Exploit DB Packet Storm

1897	5.4	MEDIUM Network	vercel	next.js	Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when s…	CWE-436 Interpretation Conflict	CVE-2026-44576	2026-05-14 22:44	2026-05-14	Show	GitHub Exploit DB Packet Storm

1898	5.9	MEDIUM Network	haxx	curl	curl might erroneously pass on credentials for a first proxy to a second proxy. This can happen when the following conditions are true: 1. curl is setup to use specific different proxies for differ…	CWE-522 Insufficiently Protected Credentials	CVE-2026-6253	2026-05-14 22:40	2026-05-13	Show	GitHub Exploit DB Packet Storm

1899	6.1	MEDIUM Network	astro	astro	Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots parameters, but did not bind the ciphert…	CWE-323 CWE-79 Reusing a Nonce, Key Pair in Encryption Cross-site Scripting	CVE-2026-45028	2026-05-14 22:28	2026-05-14	Show	GitHub Exploit DB Packet Storm

1900	8.8	HIGH Network	-	-	Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspec…	CWE-693 Protection Mechanism Failure	CVE-2026-45227	2026-05-14 22:16	2026-05-13	Show	GitHub Exploit DB Packet Storm