Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1711 7.1 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)におけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-28402 2026-05-7 11:28 2026-02-27 Show GitHub Exploit DB Packet Storm
1712 6.5 警告
Network 		アップル Container アップルのContainerにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-28909 2026-05-7 11:28 2026-04-30 Show GitHub Exploit DB Packet Storm
1713 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-29169 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
1714 5.9 警告
Network 		Hex Hex Hexにおける複数の脆弱性 CWE-354
CWE-494
CVE-2026-32148 2026-05-7 11:28 2026-04-30 Show GitHub Exploit DB Packet Storm
1715 4.8 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-33006 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
1716 5.3 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-33007 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
1717 4.3 警告
Network 		- KeystoneJSのKeystoneにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33326 2026-05-7 11:27 2026-03-24 Show GitHub Exploit DB Packet Storm
1718 9.8 緊急
Network 		Absolute Software secure access Absolute Softwareのsecure accessにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-33446 2026-05-7 11:27 2026-04-30 Show GitHub Exploit DB Packet Storm
1719 9.8 緊急
Network 		Absolute Software secure access Absolute Softwareのsecure accessにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-33447 2026-05-7 11:27 2026-04-30 Show GitHub Exploit DB Packet Storm
1720 3.3 低
Local 		Absolute Software secure access Absolute Softwareのsecure accessにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-33448 2026-05-7 11:27 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312881 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write 		CVE-2024-7965 2024-09-18 21:40 2024-08-22 Show GitHub Exploit DB Packet Storm
312882 8.8 HIGH
Network 		redhat openshift_data_science
openshift_ai 		A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option … NVD-CWE-Other
CVE-2024-7557 2024-09-18 16:15 2024-08-12 Show GitHub Exploit DB Packet Storm
312883 6.7 MEDIUM
Local 		microsoft windows_10_1507
windows_10_1809
windows_server_2019
windows_server_2022
windows_11_21h2
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_11_23h2
windows_server_2022_… 		Summary: Microsoft was notified that an elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS), including a subset of Azure Virtual Machin… NVD-CWE-Other
CVE-2024-21302 2024-09-18 09:15 2024-08-8 Show GitHub Exploit DB Packet Storm
312884 7.5 HIGH
Network 		containers aardvark-dns A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open… NVD-CWE-noinfo
CVE-2024-8418 2024-09-18 05:15 2024-09-5 Show GitHub Exploit DB Packet Storm
312885 4.3 MEDIUM
Network 		imagerecycle imagerecycle_pdf_\&_image_compression The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.14. This is due to missing or incorrect nonce valid… CWE-352
 Origin Validation Error 		CVE-2024-8120 2024-09-18 05:07 2024-08-24 Show GitHub Exploit DB Packet Storm
312886 4.8 MEDIUM
Network 		cleversoft clever_addons_for_elementor Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CleverSoft Clever Addons for Elementor allows Stored XSS.This issue affects Clever Addons … CWE-79
Cross-site Scripting 		CVE-2024-43324 2024-09-18 05:04 2024-08-18 Show GitHub Exploit DB Packet Storm
312887 6.1 MEDIUM
Network 		orbisius child_theme_creator Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Chil… CWE-79
Cross-site Scripting 		CVE-2024-43276 2024-09-18 05:00 2024-08-18 Show GitHub Exploit DB Packet Storm
312888 5.4 MEDIUM
Network 		cpothemes allegiant Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a thro… CWE-79
Cross-site Scripting 		CVE-2024-43329 2024-09-18 04:59 2024-08-18 Show GitHub Exploit DB Packet Storm
312889 6.1 MEDIUM
Network 		wpbeaveraddons powerpack_lite_for_beaver_builder Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack for Beaver Builder allows Reflected XSS.This issue affects Pow… CWE-79
Cross-site Scripting 		CVE-2024-43330 2024-09-18 04:53 2024-08-18 Show GitHub Exploit DB Packet Storm
312890 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ES… CWE-908
 Use of Uninitialized Resource 		CVE-2024-7526 2024-09-18 04:15 2024-08-6 Show GitHub Exploit DB Packet Storm