Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2511	9.1	緊急 Network	Technostrobe	HI-LED-WR120-G2 Firmware	TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性	CWE-862 CWE-863	CVE-2026-5574	2026-05-7 12:00	2026-04-5	Show	GitHub Exploit DB Packet Storm

2512	7.1	重要 Local	レッドハット Xiph.Org	Red Hat Enterprise Linux Theora	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-5673	2026-05-7 12:00	2026-04-6	Show	GitHub Exploit DB Packet Storm

2513	9.8	緊急 Network	Sipeed	Picoclaw	SipeedのPicoclawにおける複数の脆弱性	CWE-74 CWE-77	CVE-2026-6987	2026-05-7 12:00	2026-04-25	Show	GitHub Exploit DB Packet Storm

2514	8.8	重要 Network	Coze	Coze Studio	CozeのCoze Studioにおける複数の脆弱性	CWE-74 CWE-89	CVE-2026-7023	2026-05-7 12:00	2026-04-26	Show	GitHub Exploit DB Packet Storm

2515	7.3	重要 Network	ShadowCloneLabs	Glutamate MCP Servers	ShadowCloneLabsのGlutamate MCP Serversにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-7094	2026-05-7 12:00	2026-04-27	Show	GitHub Exploit DB Packet Storm

2516	5.4	警告 Network	helpy.io	helpy	helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40229	2026-05-7 12:00	2026-04-29	Show	GitHub Exploit DB Packet Storm

2517	5.4	警告 Network	helpy.io	helpy	helpy.ioのhelpyにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40230	2026-05-7 12:00	2026-04-29	Show	GitHub Exploit DB Packet Storm

2518	7.5	重要 Network	Exim Development	Exim	Exim DevelopmentのEximにおける指定された機能の不適切な提供に関する脆弱性	CWE-684 指定された機能の不適切な提供	CVE-2026-40684	2026-05-7 12:00	2026-04-30	Show	GitHub Exploit DB Packet Storm

2519	9.8	緊急 Network	Exim Development	Exim	Exim DevelopmentのEximにおける複数の脆弱性	CWE-684 CWE-787	CVE-2026-40685	2026-05-7 12:00	2026-04-30	Show	GitHub Exploit DB Packet Storm

2520	5.3	警告 Network	Exim Development	Exim	Exim DevelopmentのEximにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40686	2026-05-7 12:00	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1211	7.5	HIGH Network	arubanetworks	arubaos sd-wan	A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-23826	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1212	7.5	HIGH Network	arubanetworks	arubaos sd-wan	Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network mess…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-23824	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1213	7.5	HIGH Network	arubanetworks	arubaos sd-wan	Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network mess…	CWE-20 Improper Input Validation	CVE-2026-23825	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1214	5.4	MEDIUM Network	arubanetworks	arubaos sd-wan	A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled. Existing sessions are not invalidated wh…	CWE-613 Insufficient Session Expiration	CVE-2026-44873	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1215	4.9	MEDIUM Network	arubanetworks	arubaos	A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Succe…	CWE-284 Improper Access Control	CVE-2026-44874	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1216	7.2	HIGH Network	arubanetworks	arubaos sd-wan	Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo…	CWE-77 Command Injection	CVE-2026-44865	2026-05-15 21:44	2026-05-13	Show	GitHub Exploit DB Packet Storm

1217	9.8	CRITICAL Network	-	-	Reserved. Details will be published at disclosure.	CWE-20 Improper Input Validation	CVE-2026-45392	2026-05-15 21:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

1218	9.8	CRITICAL Network	-	-	Reserved. Details will be published at disclosure.	CWE-20 Improper Input Validation	CVE-2026-45391	2026-05-15 21:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

1219	9.6	CRITICAL Network	-	-	Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to hi…	CWE-459 Incomplete Cleanup	CVE-2026-34263	2026-05-15 21:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

1220	8.3	HIGH Network	-	-	Out of bounds write in Codecs in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: …	CWE-787 Out-of-bounds Write	CVE-2026-8569	2026-05-15 07:16	2026-05-15	Show	GitHub Exploit DB Packet Storm