Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
31	6.7	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows リッチテキストエディットの特権昇格の脆弱性 New	CWE-415 二重解放	CVE-2026-32170	2026-05-18 12:18	2026-05-12	Show	GitHub Exploit DB Packet Storm

32	4.4	警告 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows フィルタリングプラットフォーム (WFP) のセキュリティ機能のバイパスの脆弱性 New	CWE-284 不適切なアクセス制御	CVE-2026-32209	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

33	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows Event Logging Service の特権の昇格の脆弱性 New	CWE-284 不適切なアクセス制御	CVE-2026-33834	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

34	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Wind…	Windows Cloud Files Mini Filter ドライバーの特権の昇格の脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-33835	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

35	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows TCP/IP Local の特権昇格の脆弱性 New	CWE-122 ヒープオーバーフロー	CVE-2026-33837	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

36	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows メッセージキュー (MSMQ) の特権昇格の脆弱性 New	CWE-415 二重解放	CVE-2026-33838	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

37	7	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Wind…	Win32k の特権の昇格の脆弱性 New	CWE-362 競合状態	CVE-2026-33839	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

38	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025	Win32k の特権の昇格の脆弱性 New	CWE-416 解放済みメモリの使用	CVE-2026-33840	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

39	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 23h2 Microsoft Windows Server 2022 Microsoft Windows 11 24h2 Microsoft Wind…	Windows カーネルの特権の昇格の脆弱性 New	CWE-122 ヒープオーバーフロー	CVE-2026-33841	2026-05-18 12:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

40	7.5	重要 Network	MediaWiki	MediaWiki	MediaWikiにおける情報漏えいに関する脆弱性 New	CWE-200 情報漏えい	CVE-2026-34087	2026-05-18 12:17	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311861	7.2	HIGH Network	cisco	unified_computing_system	A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to pe…	CWE-77 Command Injection	CVE-2024-20365	2024-10-8 23:28	2024-10-3	Show	GitHub Exploit DB Packet Storm

311862	6.1	MEDIUM Network	sulu	sulu	Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle comp…	CWE-79 Cross-site Scripting	CVE-2024-47617	2024-10-8 23:23	2024-10-4	Show	GitHub Exploit DB Packet Storm

311863	5.9	MEDIUM Network	cisco	nexus_dashboard_orchestrator	A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device.&n…	CWE-295 Improper Certificate Validation	CVE-2024-20385	2024-10-8 23:22	2024-10-3	Show	GitHub Exploit DB Packet Storm

311864	7.5	HIGH Network	hypestudio	social_web_suite	The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log fu…	CWE-22 Path Traversal	CVE-2024-8352	2024-10-8 23:17	2024-10-3	Show	GitHub Exploit DB Packet Storm

311865	8.8	HIGH Network	cisco	nexus_dashboard_fabric_controller	A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack agains…	CWE-77 Command Injection	CVE-2024-20432	2024-10-8 23:10	2024-10-3	Show	GitHub Exploit DB Packet Storm

311866	5.4	MEDIUM Network	cisco	nexus_dashboard nexus_dashboard_fabric_controller	A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device. This vulnerability exists becaus…	CWE-862 Missing Authorization	CVE-2024-20438	2024-10-8 22:54	2024-10-3	Show	GitHub Exploit DB Packet Storm

311867	9.1	CRITICAL Network	cisco	rv042_firmware rv042g_firmware rv320_firmware rv325_firmware	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb…	CWE-787 Out-of-bounds Write	CVE-2024-20521	2024-10-8 22:50	2024-10-3	Show	GitHub Exploit DB Packet Storm

311868	9.1	CRITICAL Network	cisco	rv042_firmware rv042g_firmware rv320_firmware rv325_firmware	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb…	CWE-787 Out-of-bounds Write	CVE-2024-20520	2024-10-8 22:50	2024-10-3	Show	GitHub Exploit DB Packet Storm

311869	9.1	CRITICAL Network	cisco	rv042_firmware rv042g_firmware rv320_firmware rv325_firmware	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb…	CWE-787 Out-of-bounds Write	CVE-2024-20519	2024-10-8 22:50	2024-10-3	Show	GitHub Exploit DB Packet Storm

311870	9.1	CRITICAL Network	cisco	rv042_firmware rv042g_firmware rv320_firmware rv325_firmware	A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb…	CWE-787 Out-of-bounds Write	CVE-2024-20518	2024-10-8 22:50	2024-10-3	Show	GitHub Exploit DB Packet Storm