Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2931 8.1 重要
Network
Suyog Sonwalkar MCP Server Kubernetes Suyog SonwalkarのMCP Server Kubernetesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-39884 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2932 6.5 警告
Network
jqlang jq jqlangのjqにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-39979 2026-04-27 11:21 2026-04-13 Show GitHub Exploit DB Packet Storm
2933 5.5 警告
Local
Linux Foundation Sigstore Timestamp Authority Linux FoundationのSigstore Timestamp Authorityにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-39984 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2934 7.1 重要
Network
lfprojects Zarf lfprojectsのZarfにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40090 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2935 4.4 警告
Local
Authzed, Inc. SpiceDB Authzed, Inc.のSpiceDBにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-40091 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
2936 5.4 警告
Network
OpenMage Magento OpenMageのMagentoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-40098 2026-04-27 11:21 2026-04-20 Show GitHub Exploit DB Packet Storm
2937 7.5 重要
Network
free5gc free5gc free5GCにおける複数の脆弱性 CWE-285
CWE-636
CVE-2026-40248 2026-04-27 11:21 2026-04-16 Show GitHub Exploit DB Packet Storm
2938 5.8 警告
Network
free5gc free5gc
udr
free5GCのfree5GC等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック
CVE-2026-40343 2026-04-27 11:21 2026-04-22 Show GitHub Exploit DB Packet Storm
2939 8.8 重要
Network
OpenMage Magento OpenMageのMagentoにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-40488 2026-04-27 11:21 2026-04-20 Show GitHub Exploit DB Packet Storm
2940 9.1 緊急
Network
FreeScout FreeScout FreeScoutにおける複数の脆弱性 CWE-330
CWE-340
CVE-2026-40496 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could explo… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34677 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
412 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could explo… New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34673 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
413 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker c… New CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-34672 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
414 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exp… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-34671 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
415 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New CWE-20
 Improper Input Validation 
CVE-2026-34670 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
416 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New CWE-20
 Improper Input Validation 
CVE-2026-34669 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
417 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New CWE-20
 Improper Input Validation 
CVE-2026-34668 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
418 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker c… New CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2026-34667 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
419 6.2 MEDIUM
Local
adobe c2pa
c2pa-web
CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit … New CWE-20
 Improper Input Validation 
CVE-2026-34666 2026-05-15 23:13 2026-05-13 Show GitHub Exploit DB Packet Storm
420 - - - PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization. An unauthenticated user could craft the html payload which could incl… New CWE-22
Path Traversal
CVE-2026-41552 2026-05-15 23:12 2026-05-15 Show GitHub Exploit DB Packet Storm