Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3191 8.8 重要
Local
neutrinolabs xrdp neutrinolabsのxrdpにおける削除された特権に対する不適切なチェックに関する脆弱性 CWE-273
削除された特権に対する不適切なチェック
CVE-2026-32107 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3192 8.1 重要
Network
neutrinolabs xrdp neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-32623 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3193 6.5 警告
Network
neutrinolabs xrdp neutrinolabsのxrdpにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-32624 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3194 6.3 警告
Network
neutrinolabs xrdp neutrinolabsのxrdpにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-33145 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3195 9.1 緊急
Network
neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-33516 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3196 9.1 緊急
Network
neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-33689 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
3197 2.9
Local
オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK
オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-34268 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3198 9.8 緊急
Network
オラクル Oracle Advanced Inbound Telephony オラクルのOracle Advanced Inbound Telephonyにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-34275 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3199 7.5 重要
Network
オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK
オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-34282 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3200 2.4
Network
オラクル Oracle Database オラクルのOracle Databaseにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34312 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 4.3 MEDIUM
Network
- - A weakness has been identified in omec-project amf up to 2.1.3-dev. This affects an unknown function of the file ngap/handler.go of the component NGAP Message Handler. This manipulation causes null p… New CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference
CVE-2026-8782 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
352 4.3 MEDIUM
Network
- - A security flaw has been discovered in omec-project amf up to 2.1.3-dev. The impacted element is the function RANConfiguration of the file ngap/handler.go. The manipulation results in null pointer de… New CWE-404
CWE-476
 Improper Resource Shutdown or Release
 NULL Pointer Dereference
CVE-2026-8781 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
353 4.3 MEDIUM
Network
- - A vulnerability was identified in omec-project amf up to 2.1.3-dev. The affected element is an unknown function of the file ngap/dispatcher.go of the component NGAP Message Handler. The manipulation … New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-8780 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
354 4.3 MEDIUM
Network
- - A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement ca… New CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-8779 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
355 6.3 MEDIUM
Network
- - A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulatio… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-8777 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
356 8.8 HIGH
Network
- - A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulati… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-8776 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
357 8.8 HIGH
Network
- - A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TP… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-8775 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
358 6.3 MEDIUM
Network
- - A vulnerability was detected in Edimax BR-6228NC 1.22. Affected by this issue is the function mp of the file /goform/mp of the component POST Request Handler. The manipulation of the argument command… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-8774 2026-05-18 11:16 2026-05-18 Show GitHub Exploit DB Packet Storm
359 - - - Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the metasploitPostgreSQL service the subseque… New CWE-284
CWE-427
CWE-829
Improper Access Control
 Uncontrolled Search Path Element
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-7373 2026-05-18 11:16 2026-05-15 Show GitHub Exploit DB Packet Storm
360 4.7 MEDIUM
Network
- - A security vulnerability has been detected in linlinjava litemall up to 1.8.0. Affected by this vulnerability is the function backup/load of the file litemall-db/src/main/java/org/linlinjava/litemall… New CWE-74
CWE-88
Injection
Argument Injection
CVE-2026-8773 2026-05-18 09:16 2026-05-18 Show GitHub Exploit DB Packet Storm