Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248041 4 警告 contentkeeper technologies - ContentKeeper におけるパスワードを取得される脆弱性 - CVE-2006-5018 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
248042 7.5 危険 e-vision - Szava Gyula and Csaba Tamas e-Vision CMS の admin/all_users.php における SQL インジェクションの脆弱性 - CVE-2006-5017 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
248043 5 警告 e-vision - Szava Gyula の admin/x_image.php における任意のファイルをアップロードされる脆弱性 - CVE-2006-5016 2012-06-26 15:37 2006-09-27 Show GitHub Exploit DB Packet Storm
248044 9 危険 cPanel - cPanel における権限を取得される脆弱性 - CVE-2006-5014 2012-06-26 15:37 2006-09-26 Show GitHub Exploit DB Packet Storm
248045 4.6 警告 Apache Friends - Apache Friends XAMPP における権限を取得される脆弱性 - CVE-2006-4994 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
248046 5 警告 grayscale - Grayscale BandSite CMS における重要な情報を取得される脆弱性 - CVE-2006-4986 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
248047 4.3 警告 grayscale - Grayscale BandSite CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2006-4985 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
248048 7.5 危険 grayscale - Grayscale BandSite CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4984 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
248049 7.5 危険 シスコシステムズ - Cisco NAC におけるコントロールメソッドを回避される脆弱性 - CVE-2006-4983 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
248050 4.6 警告 シスコシステムズ - Cisco NAC におけるローカルネットワークに接続される脆弱性 - CVE-2006-4982 2012-06-26 15:37 2006-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
731 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… CWE-22
Path Traversal 		CVE-2026-34909 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
732 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. CWE-284
Improper Access Control 		CVE-2026-34908 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
733 9.1 CRITICAL
Network 		- - A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-33000 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
734 7.8 HIGH
Local 		mullvad mullvad_vpn Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upgrade. The installer… CWE-269
CWE-345
CWE-427
NVD-CWE-noinfo
 Improper Privilege Management
 Insufficient Verification of Data Authenticity
 Uncontrolled Search Path Element 		CVE-2026-32323 2026-05-22 09:04 2026-05-19 Show GitHub Exploit DB Packet Storm
735 4.3 MEDIUM
Network 		glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization 		CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
736 3.5 LOW
Network 		github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm
737 10.0 CRITICAL
Network 		microsoft azure_local
azure_resource_manager 		Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. CWE-287
NVD-CWE-noinfo
Improper Authentication 		CVE-2026-42822 2026-05-22 08:45 2026-05-19 Show GitHub Exploit DB Packet Storm
738 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-5297 2026-05-22 08:16 2026-05-22 Show GitHub Exploit DB Packet Storm
739 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-8352 2026-05-22 06:16 2026-05-22 Show GitHub Exploit DB Packet Storm
740 8.8 HIGH
Network 		- - IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the… CWE-88
Argument Injection 		CVE-2026-47114 2026-05-22 06:03 2026-05-22 Show GitHub Exploit DB Packet Storm