Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1991	4.7	警告 Local	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-43659	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1992	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-43660	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1993	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-43661	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1994	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44197	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1995	4.3	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44198	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1996	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44199	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1997	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44200	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

1998	5.3	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44201	2026-05-14 10:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

1999	7.5	重要 Network	JetBrains	TeamCity	JetBrainsのTeamCityにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-44413	2026-05-14 10:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

2000	5.3	警告 Network	uriparser project	uriparser	uriparser projectのuriparserにおける数値打ち切り誤差に関する脆弱性	CWE-197 数値打ち切り誤差	CVE-2026-44927	2026-05-14 10:15	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2131	-		-	-	Lack of input filtering leads to an XSS vector in the HTML filter code.	CWE-79 Cross-site Scripting	CVE-2026-48905	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2132	-		-	-	An improper access check allows privelege escalation through the com_users group editing webservice endpoint.	CWE-284 Improper Access Control	CVE-2026-48904	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2133	-		-	-	Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.	CWE-79 Cross-site Scripting	CVE-2026-48903	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2134	-		-	-	An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.	CWE-284 Improper Access Control	CVE-2026-48900	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2135	-		-	-	An improper access check allows privilege escalation through the com_users batch task.	CWE-284 Improper Access Control	CVE-2026-48899	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2136	-		-	-	An improper access check allows privilege escalation through the com_users batch task.	CWE-284 Improper Access Control	CVE-2026-48898	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2137	-		-	-	Rejected reason: Further research determined the issue is not a vulnerability.	-	CVE-2026-48091	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2138	4.3	MEDIUM Network	-	-	Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An a…	CWE-862 Missing Authorization	CVE-2026-47728	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2139	3.1	LOW Network	-	-	Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-47716	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

2140	3.1	LOW Network	-	-	Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions, look up that event without also requir…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-47715	2026-05-27 02:16	2026-05-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed