Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1701	5	警告 Network	Cloud Foundry, Inc.	routing release cf-deployment	Cloud Foundry, Inc.のCf-deployment等の複数製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性	CWE-923 意図するエンドポイントとの通信チャネルの不適切な制限	CVE-2026-22726	2026-05-7 11:28	2026-05-1	Show	GitHub Exploit DB Packet Storm

1702	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22740	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

1703	3.1	低 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-22741	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

1704	5.3	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22745	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

1705	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-23918	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

1706	8.8	重要 Network	Apache Software Foundation	Apache HTTP Server	Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-24072	2026-05-7 11:28	2026-05-4	Show	GitHub Exploit DB Packet Storm

1707	9.8	緊急 Network	NVIDIA	nvflare	NVIDIAのnvflareにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-24178	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

1708	8.8	重要 Network	NVIDIA	nvflare	NVIDIAのnvflareにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-24186	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

1709	6.5	警告 Network	NVIDIA	nvflare	NVIDIAのnvflareにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24204	2026-05-7 11:28	2026-04-28	Show	GitHub Exploit DB Packet Storm

1710	5.3	警告 Network	GNOME Project レッドハット	Red Hat Enterprise Linux libsoup	GNOME Project等の複数ベンダの製品におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-2708	2026-05-7 11:28	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312991	-		-	-	Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-284 Improper Access Control	CVE-2023-43626	2024-09-17 02:16	2024-09-17	Show	GitHub Exploit DB Packet Storm

312992	-		-	-	Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-822 Untrusted Pointer Dereference	CVE-2023-42772	2024-09-17 02:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

312993	-		-	-	A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-362 Race Condition	CVE-2023-41833	2024-09-17 02:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

312994	-		-	-	Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.	CWE-125 Out-of-bounds Read	CVE-2023-25546	2024-09-17 02:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

312995	-		-	-	NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference	CVE-2023-23904	2024-09-17 02:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

312996	-		-	-	Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-787 Out-of-bounds Write	CVE-2023-22351	2024-09-17 02:15	2024-09-17	Show	GitHub Exploit DB Packet Storm

312997	9.8	CRITICAL Network	ibm	sterling_connect_direct_web_services	IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.	CWE-1392 Use of Default Credentials	CVE-2024-39747	2024-09-17 02:13	2024-08-31	Show	GitHub Exploit DB Packet Storm

312998	7.5	HIGH Network	skyport	skyportd	Skyport Daemon (skyportd) is the daemon for the Skyport Panel. By making thousands of folders & files (easy due to skyport's lack of rate limiting on createFolder. createFile), skyportd in a lot of c…	CWE-400 Uncontrolled Resource Consumption	CVE-2024-42481	2024-09-17 02:10	2024-08-13	Show	GitHub Exploit DB Packet Storm

312999	7.8	HIGH Local	ultimaker	ultimaker_cura	UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of th…	CWE-94 Code Injection	CVE-2024-8374	2024-09-17 01:44	2024-09-3	Show	GitHub Exploit DB Packet Storm

313000	6.4	MEDIUM Network	halo	halo	Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute malicious …	CWE-79 Cross-site Scripting	CVE-2024-43793	2024-09-17 01:28	2024-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed