Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2191 9.8 緊急
Network 		NVIDIA nvflare NVIDIAのnvflareにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-24178 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2192 8.8 重要
Network 		NVIDIA nvflare NVIDIAのnvflareにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-24186 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2193 6.5 警告
Network 		NVIDIA nvflare NVIDIAのnvflareにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-24204 2026-05-7 11:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2194 5.3 警告
Network 		GNOME Project
レッドハット		 Red Hat Enterprise Linux
libsoup 		GNOME Project等の複数ベンダの製品におけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-2708 2026-05-7 11:28 2026-04-23 Show GitHub Exploit DB Packet Storm
2195 7.1 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)におけるデータの整合性検証不備に関する脆弱性 CWE-354
データの整合性検証不備 		CVE-2026-28402 2026-05-7 11:28 2026-02-27 Show GitHub Exploit DB Packet Storm
2196 6.5 警告
Network 		アップル Container アップルのContainerにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-28909 2026-05-7 11:28 2026-04-30 Show GitHub Exploit DB Packet Storm
2197 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-29169 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
2198 5.9 警告
Network 		Hex Hex Hexにおける複数の脆弱性 CWE-354
CWE-494
CVE-2026-32148 2026-05-7 11:28 2026-04-30 Show GitHub Exploit DB Packet Storm
2199 4.8 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-33006 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
2200 5.3 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-33007 2026-05-7 11:27 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313331 7.8 HIGH
Local 		google android there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need… NVD-CWE-noinfo
CVE-2024-29779 2024-09-18 22:52 2024-09-14 Show GitHub Exploit DB Packet Storm
313332 7.8 HIGH
Local 		google android In TBD of TBD, there is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional executio… NVD-CWE-noinfo
CVE-2024-44092 2024-09-18 22:51 2024-09-14 Show GitHub Exploit DB Packet Storm
313333 7.8 HIGH
Local 		google android In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privi… CWE-787
 Out-of-bounds Write 		CVE-2024-44093 2024-09-18 22:42 2024-09-14 Show GitHub Exploit DB Packet Storm
313334 7.8 HIGH
Local 		google android In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privi… CWE-787
 Out-of-bounds Write 		CVE-2024-44094 2024-09-18 22:37 2024-09-14 Show GitHub Exploit DB Packet Storm
313335 7.5 HIGH
Network 		gitlab gitlab ReDoS flaw in RefMatcher when matching branch names using wildcards in GitLab EE/CE affecting all versions from 11.3 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allows denial of s… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2024-2800 2024-09-18 21:42 2024-08-8 Show GitHub Exploit DB Packet Storm
313336 5.4 MEDIUM
Network 		gitlab gitlab A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2. When view… CWE-79
Cross-site Scripting 		CVE-2024-4207 2024-09-18 21:41 2024-08-8 Show GitHub Exploit DB Packet Storm
313337 8.8 HIGH
Network 		google
microsoft 		chrome
edge_chromium 		Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CWE-787
 Out-of-bounds Write 		CVE-2024-7965 2024-09-18 21:40 2024-08-22 Show GitHub Exploit DB Packet Storm
313338 8.8 HIGH
Network 		redhat openshift_data_science
openshift_ai 		A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option … NVD-CWE-Other
CVE-2024-7557 2024-09-18 16:15 2024-08-12 Show GitHub Exploit DB Packet Storm
313339 6.7 MEDIUM
Local 		microsoft windows_10_1507
windows_10_1809
windows_server_2019
windows_server_2022
windows_11_21h2
windows_10_21h2
windows_11_22h2
windows_10_22h2
windows_11_23h2
windows_server_2022_… 		Summary: Microsoft was notified that an elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS), including a subset of Azure Virtual Machin… NVD-CWE-Other
CVE-2024-21302 2024-09-18 09:15 2024-08-8 Show GitHub Exploit DB Packet Storm
313340 7.5 HIGH
Network 		containers aardvark-dns A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries. An attacker can exploit this flaw by keeping a TCP connection open… NVD-CWE-noinfo
CVE-2024-8418 2024-09-18 05:15 2024-09-5 Show GitHub Exploit DB Packet Storm