Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
321 7.8 重要
Local 		マイクロソフト Microsoft Office マイクロソフトのMicrosoft Officeにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-42831 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
322 5.5 警告
Local 		マイクロソフト Microsoft Word
Microsoft Office
Microsoft Excel 		マイクロソフトのMicrosoft Excel等の複数製品におけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-42832 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
323 7.5 重要
Network 		Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおける認証に関する脆弱性 New CWE-287
CWE-noinfo
CVE-2026-42855 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
324 6.1 警告
Network 		マイクロソフト Microsoft Exchange Server マイクロソフトのMicrosoft Exchange Serverにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42897 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
325 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43286 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
326 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43287 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
327 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 New CWE-908
初期化されていないリソースの使用 		CVE-2026-43288 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
328 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-43289 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
329 7.5 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 New CWE-667
不適切なロック 		CVE-2026-43296 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
330 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-43297 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311861 7.2 HIGH
Network 		cisco unified_computing_system A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to pe… CWE-77
Command Injection 		CVE-2024-20365 2024-10-8 23:28 2024-10-3 Show GitHub Exploit DB Packet Storm
311862 6.1 MEDIUM
Network 		sulu sulu Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle comp… CWE-79
Cross-site Scripting 		CVE-2024-47617 2024-10-8 23:23 2024-10-4 Show GitHub Exploit DB Packet Storm
311863 5.9 MEDIUM
Network 		cisco nexus_dashboard_orchestrator A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device.&n… CWE-295
Improper Certificate Validation  		CVE-2024-20385 2024-10-8 23:22 2024-10-3 Show GitHub Exploit DB Packet Storm
311864 7.5 HIGH
Network 		hypestudio social_web_suite The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log fu… CWE-22
Path Traversal 		CVE-2024-8352 2024-10-8 23:17 2024-10-3 Show GitHub Exploit DB Packet Storm
311865 8.8 HIGH
Network 		cisco nexus_dashboard_fabric_controller A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack agains… CWE-77
Command Injection 		CVE-2024-20432 2024-10-8 23:10 2024-10-3 Show GitHub Exploit DB Packet Storm
311866 5.4 MEDIUM
Network 		cisco nexus_dashboard
nexus_dashboard_fabric_controller 		A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device. This vulnerability exists becaus… CWE-862
 Missing Authorization 		CVE-2024-20438 2024-10-8 22:54 2024-10-3 Show GitHub Exploit DB Packet Storm
311867 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20521 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311868 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20520 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311869 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20519 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311870 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20518 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm