Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1581	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6531	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1582	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるバッファオーバーリードの脆弱性	CWE-126 バッファオーバーリード	CVE-2026-6532	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1583	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6533	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1584	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6534	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1585	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6535	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1586	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6536	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1587	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6537	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1588	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6538	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1589	4.4	警告 Local	notepad-plus-plus	notepad++	notepad-plus-plusのnotepad++における書式文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2026-6539	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

1590	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける不適切に制御された順次メモリ割り当てに関する脆弱性	CWE-1325 不適切に制御された順次メモリ割り当て	CVE-2026-6867	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1401	8.8	HIGH Network	-	-	Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management. Prior to 1.0.0-beta.15, an insecure direct…	CWE-863 Incorrect Authorization	CVE-2026-42843	2026-05-14 01:04	2026-05-12	Show	GitHub Exploit DB Packet Storm

1402	-		-	-	pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(…	CWE-195 CWE-918 Signed to Unsigned Conversion Error Server-Side Request Forgery (SSRF)	CVE-2026-41682	2026-05-14 01:01	2026-05-9	Show	GitHub Exploit DB Packet Storm

1403	10.0	CRITICAL Network	-	-	openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth…	CWE-287 Improper Authentication	CVE-2026-41070	2026-05-14 01:00	2026-05-9	Show	GitHub Exploit DB Packet Storm

1404	9.1	CRITICAL Network	-	-	Sentry is an error tracking and performance monitoring tool. From version 21.12.0 to before version 26.4.1, a critical vulnerability was discovered in the SAML SSO implementation of Sentry. The vulne…	CWE-290 Authentication Bypass by Spoofing	CVE-2026-42354	2026-05-14 00:59	2026-05-9	Show	GitHub Exploit DB Packet Storm

1405	10.0	CRITICAL Network	-	-	Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflow (.github/workflows/pr-docker-build.yml) allows a…	CWE-94 Code Injection	CVE-2026-42298	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1406	6.5	MEDIUM Network	-	-	Postiz is an AI social media scheduling tool. From version 2.16.6 to before version 2.21.7, all SSRF protections added in v2.21.4–v2.21.6 share a fundamental TOCTOU (Time-of-Check-Time-of-Use) vulner…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42346	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1407	8.9	HIGH Network	-	-	Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store arbitrary HTML in post content by tampering their ow…	CWE-79 Cross-site Scripting	CVE-2026-42556	2026-05-14 00:58	2026-05-9	Show	GitHub Exploit DB Packet Storm

1408	-		-	-	Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.P…	CWE-79 Cross-site Scripting	CVE-2026-42794	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1409	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled Gra…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42793	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm

1410	-		-	-	Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Docum…	CWE-407 Inefficient Algorithmic Complexity	CVE-2026-43967	2026-05-14 00:57	2026-05-9	Show	GitHub Exploit DB Packet Storm