Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
141 6.5 警告
Network 		vLLM vLLM vLLMにおける複数の脆弱性 New CWE-131
CWE-704
CVE-2026-44223 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
142 8.8 重要
Network 		requarks Wiki.js requarksのWiki.jsにおける権限管理に関する脆弱性 New CWE-269
CWE-noinfo
CVE-2026-44224 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
143 6.5 警告
Network 		warpgate project warpgate Warpgate projectのWarpgateにおけるクロスサイトリクエストフォージェリの脆弱性 New CWE-352
同一生成元ポリシー違反 		CVE-2026-44347 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
144 7.2 重要
Network 		WING FTP software Wing FTP Server WING FTP softwareのWing FTP Serverにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2026-44403 2026-05-18 12:12 2026-05-12 Show GitHub Exploit DB Packet Storm
145 5.3 警告
Network 		Python Software Foundation urllib3 Python Software Foundationのurllib3における情報漏えいに関する脆弱性 New CWE-200
CWE-noinfo
CVE-2026-44431 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
146 7.5 重要
Network 		Python Software Foundation urllib3 Python Software Foundationのurllib3における高圧縮データの処理 (データ増幅)に関する脆弱性 New CWE-409
高圧縮データの不適切な処理 (データ増幅) 		CVE-2026-44432 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
147 5.7 警告
Adjacent 		Frappe ERPNext FrappeのERPNextにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-44440 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
148 4.3 警告
Network 		Frappe ERPNext FrappeのERPNextにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-44441 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
149 9.9 緊急
Network 		Frappe ERPNext FrappeのERPNextにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-44442 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
150 6.5 警告
Network 		Frappe ERPNext FrappeのERPNextにおけるXML 外部エンティティの脆弱性 New CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2026-44445 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311861 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbio_v7_4 if ras_manager obj null, don't print NBIO err data CWE-476
 NULL Pointer Dereference 		CVE-2024-46819 2024-10-5 02:11 2024-09-27 Show GitHub Exploit DB Packet Storm
311862 5.4 MEDIUM
Network 		oceanicsoft valeapp Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Oceanic Software ValeApp allows Stored XSS.This issue affects ValeApp: before v2.0.0. CWE-79
Cross-site Scripting 		CVE-2024-8608 2024-10-5 02:11 2024-09-27 Show GitHub Exploit DB Packet Storm
311863 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix negative array index read Avoid using the negative values for clk_idex as an index into an array pptable->DpmDesc… CWE-129
 Improper Validation of Array Index 		CVE-2024-46821 2024-10-5 02:06 2024-09-27 Show GitHub Exploit DB Packet Storm
311864 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a nul… CWE-476
 NULL Pointer Dereference 		CVE-2024-44960 2024-10-5 01:44 2024-09-5 Show GitHub Exploit DB Packet Storm
311865 7.8 HIGH
Local 		randygaul cute_png cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_load_png_mem() function at cute_png.h. CWE-787
 Out-of-bounds Write 		CVE-2024-46258 2024-10-5 01:41 2024-10-1 Show GitHub Exploit DB Packet Storm
311866 7.8 HIGH
Local 		randygaul cute_png cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_make32() function at cute_png.h. CWE-787
 Out-of-bounds Write 		CVE-2024-46261 2024-10-5 01:40 2024-10-1 Show GitHub Exploit DB Packet Storm
311867 7.8 HIGH
Local 		randygaul cute_png cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_unfilter() function at cute_png.h. CWE-787
 Out-of-bounds Write 		CVE-2024-46259 2024-10-5 01:40 2024-10-1 Show GitHub Exploit DB Packet Storm
311868 7.8 HIGH
Local 		randygaul cute_png cute_png v1.05 was discovered to contain a stack overflow via the cp_dynamic() function at cute_png.h. CWE-787
 Out-of-bounds Write 		CVE-2024-46263 2024-10-5 01:39 2024-10-1 Show GitHub Exploit DB Packet Storm
311869 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Forward soft recovery errors to userspace As we discussed before[1], soft recovery should be forwarded to userspace, … NVD-CWE-noinfo
CVE-2024-44961 2024-10-5 01:39 2024-09-5 Show GitHub Exploit DB Packet Storm
311870 7.8 HIGH
Local 		randygaul cute_png cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_block() function at cute_png.h. CWE-787
 Out-of-bounds Write 		CVE-2024-46267 2024-10-5 01:38 2024-10-1 Show GitHub Exploit DB Packet Storm