Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3571	8.1	重要 Adjacent	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-5466	2026-04-30 10:58	2026-04-10	Show	GitHub Exploit DB Packet Storm

3572	8.1	重要 Adjacent	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性	CWE-354 データの整合性検証不備	CVE-2026-5479	2026-04-30 10:58	2026-04-10	Show	GitHub Exploit DB Packet Storm

3573	5.3	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるデータの整合性検証不備に関する脆弱性	CWE-354 データの整合性検証不備	CVE-2026-5504	2026-04-30 10:58	2026-04-9	Show	GitHub Exploit DB Packet Storm

3574	4	警告 Local	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-5507	2026-04-30 10:58	2026-04-9	Show	GitHub Exploit DB Packet Storm

3575	4.3	警告 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおける送信データへの重要な情報の挿入に関する脆弱性	CWE-201 送信データへの重要な情報の挿入	CVE-2026-5512	2026-04-30 10:58	2026-04-21	Show	GitHub Exploit DB Packet Storm

3576	5.5	警告 Local	レッドハット libarchive	Red Hat OpenShift Container Platform Red Hat Enterprise Linux Red Hat Hardened Images libarchive	libarchive等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-5745	2026-04-30 10:58	2026-04-7	Show	GitHub Exploit DB Packet Storm

3577	5.3	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるバッファオーバーリードの脆弱性	CWE-126 バッファオーバーリード	CVE-2026-5772	2026-04-30 10:57	2026-04-9	Show	GitHub Exploit DB Packet Storm

3578	6.5	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-5778	2026-04-30 10:57	2026-04-9	Show	GitHub Exploit DB Packet Storm

3579	9.6	緊急 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-5845	2026-04-30 10:57	2026-04-21	Show	GitHub Exploit DB Packet Storm

3580	8.9	重要 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-5921	2026-04-30 10:57	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	8.1	HIGH Network	microsoft	malware_protection_engine	Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network. New	CWE-122 Heap-based Buffer Overflow	CVE-2026-45584	2026-05-21 03:56	2026-05-20	Show	GitHub Exploit DB Packet Storm

2	7.8	HIGH Local	microsoft	windows_admin_center	Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally. New	CWE-59 Link Following	CVE-2026-42834	2026-05-21 03:29	2026-05-20	Show	GitHub Exploit DB Packet Storm

3	9.8	CRITICAL Network	-	-	Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15. New	CWE-862 Missing Authorization	CVE-2026-8495	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

4	5.4	MEDIUM Network	-	-	Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS). This issue affects Colorbox Inline: fr… New	CWE-79 Cross-site Scripting	CVE-2026-8493	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

5	2.7	LOW Network	-	-	Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing. This issue affects Translate Drupal with GTranslate: from 0.… New	CWE-471 Modification of Assumed-Immutable Data (MAID)	CVE-2026-8492	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

6	3.7	LOW Network	-	-	Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing. This issue affects Node View Permissions: from 0.0.0 before 1.7.0, from 2… New	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-8491	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

7	5.8	MEDIUM Network	-	-	The Decent Comments WordPress plugin before 3.0.2 does not restrict access to comment author email addresses and post author email addresses via its REST API endpoint, allowing unauthenticated attack… New	-	CVE-2026-7385	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

8	4.0	MEDIUM Local	-	-	Microsoft Defender Denial of Service Vulnerability New	CWE-400 Uncontrolled Resource Consumption	CVE-2026-45498	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

9	7.8	HIGH Local	-	-	Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. New	CWE-59 Link Following	CVE-2026-41091	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

10	4.8	MEDIUM Network	-	-	CtrlPanel is open-source billing software for hosting providers. Versions 1.1.1 and prior contain a Stored Cross-Site Scripting (XSS) vulnerability exists in the admin role management interface. In a… New	CWE-80 CWE-116 Basic XSS Improper Encoding or Escaping of Output	CVE-2026-34246	2026-05-21 03:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed