Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2281	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6522	2026-05-7 12:03	2026-04-30	Show	GitHub Exploit DB Packet Storm

2282	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6523	2026-05-7 12:03	2026-04-30	Show	GitHub Exploit DB Packet Storm

2283	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける初期化されていないポインタのアクセスに関する脆弱性	CWE-824 初期化されていないポインタのアクセス	CVE-2026-6524	2026-05-7 12:03	2026-04-30	Show	GitHub Exploit DB Packet Storm

2284	5.5	警告 Local	Wireshark	Wireshark	WiresharkにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-6526	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2285	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-6527	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2286	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6528	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2287	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-6529	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2288	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-6530	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2289	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおける無限ループに関する脆弱性	CWE-835 無限ループ	CVE-2026-6531	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

2290	5.5	警告 Local	Wireshark	Wireshark	Wiresharkにおけるバッファオーバーリードの脆弱性	CWE-126 バッファオーバーリード	CVE-2026-6532	2026-05-7 12:02	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1291	5.8	MEDIUM Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has a performance optimization that skips AST analysis when the code does not contain catch, import, or async key…	CWE-693 Protection Mechanism Failure	CVE-2026-44003	2026-05-15 00:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1292	7.5	HIGH Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, sandboxed code can call Buffer.alloc() with an arbitrary size to allocate memory directly on the host heap. Because Buffer.alloc is a sy…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-44004	2026-05-15 00:22	2026-05-14	Show	GitHub Exploit DB Packet Storm

1293	10.0	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0.	CWE-94 Code Injection	CVE-2026-44006	2026-05-15 00:19	2026-05-14	Show	GitHub Exploit DB Packet Storm

1294	9.1	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer VM's require config…	CWE-284 Improper Access Control	CVE-2026-44007	2026-05-15 00:18	2026-05-14	Show	GitHub Exploit DB Packet Storm

1295	9.8	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array pr…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-44008	2026-05-15 00:17	2026-05-14	Show	GitHub Exploit DB Packet Storm

1296	7.8	HIGH Local	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2016 windows_server_2019 w…	Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.	CWE-126 Buffer Over-read	CVE-2026-34336	2026-05-15 00:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

1297	9.8	CRITICAL Network	vm2_project	vm2	vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, This vulnerability is fixed in 3.11.2.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-44009	2026-05-15 00:17	2026-05-14	Show	GitHub Exploit DB Packet Storm

1298	7.3	HIGH Network	-	-	YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#base60 handlers. Whe…	CWE-124 Buffer Underflow	CVE-2026-5089	2026-05-15 00:16	2026-05-13	Show	GitHub Exploit DB Packet Storm

1299	6.8	MEDIUM Physics	-	-	U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control. The device exposes a UART interface that lacks authentication, authorization, or access control me…	CWE-284 Improper Access Control	CVE-2026-36738	2026-05-15 00:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1300	6.5	MEDIUM Network	-	-	A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_generator.cpp does not perform any validation on the file path …	CWE-22 Path Traversal	CVE-2026-31156	2026-05-15 00:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed