Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
441 7.5 重要
Network 		ZyXEL NWA1100-N ファームウェア ZyXELのNWA1100-N ファームウェアにおける古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2026-7287 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
442 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7377 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
443 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける認証に関する脆弱性 New CWE-287
不適切な認証 		CVE-2026-8305 2026-05-18 11:23 2026-05-11 Show GitHub Exploit DB Packet Storm
444 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける保護メカニズムの不具合に関する脆弱性 New CWE-693
保護メカニズムの不具合 		CVE-2026-8401 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
445 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-8581 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
446 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるアセットへのアクセス後に実装されたアクセス制御チェックに関する脆弱性 New CWE-1280
アセットへのアクセス後に実装されたアクセス制御チェック 		CVE-2026-3607 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
447 9.8 緊急
Network 		フォーティネット FortiSandbox
FortiSandbox PaaS
FortiSandbox Cloud 		フォーティネットのFortiSandbox等の複数製品における認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-26083 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
448 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-34665 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
449 6.2 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-34666 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
450 6.2 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-34667 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311951 9.8 CRITICAL
Network 		secom dr.id_attendance_system Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database cont… CWE-89
SQL Injection 		CVE-2024-7732 2024-10-4 03:39 2024-08-14 Show GitHub Exploit DB Packet Storm
311952 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devm_add_action_or_reset() will release the I2C adapter when th… NVD-CWE-noinfo
CVE-2024-44967 2024-10-4 03:21 2024-09-5 Show GitHub Exploit DB Packet Storm
311953 5.4 MEDIUM
Network 		dotcamp ultimate_blocks The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow use… CWE-79
Cross-site Scripting 		CVE-2024-8536 2024-10-4 03:16 2024-09-30 Show GitHub Exploit DB Packet Storm
311954 7.5 HIGH
Adjacent 		alpsalpine ilx-f509_firmware Alpine Halo9 DecodeUTF7 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Al… CWE-787
 Out-of-bounds Write 		CVE-2024-23935 2024-10-4 03:07 2024-09-28 Show GitHub Exploit DB Packet Storm
311955 8.8 HIGH
Adjacent 		alpsalpine ilx-f509_firmware Alpine Halo9 prh_l2_sar_data_ind Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine… CWE-416
 Use After Free 		CVE-2024-23923 2024-10-4 03:07 2024-09-28 Show GitHub Exploit DB Packet Storm
311956 6.8 MEDIUM
Physics 		alpsalpine ilx-f509_firmware Alpine Halo9 UPDM_wemCmdUpdFSpeDecomp Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations… CWE-78
OS Command  		CVE-2024-23961 2024-10-4 03:06 2024-09-28 Show GitHub Exploit DB Packet Storm
311957 4.6 MEDIUM
Physics 		alpsalpine ilx-f509_firmware Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations … CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-23960 2024-10-4 03:06 2024-09-28 Show GitHub Exploit DB Packet Storm
311958 6.8 MEDIUM
Physics 		alpsalpine ilx-f509_firmware Alpine Halo9 UPDM_wemCmdCreatSHA256Hash Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installatio… CWE-78
OS Command  		CVE-2024-23924 2024-10-4 03:06 2024-09-28 Show GitHub Exploit DB Packet Storm
311959 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Move per CPU pointer access into the atomic section The recent fix for making the take over of the broadcast time… NVD-CWE-noinfo
CVE-2024-44968 2024-10-4 03:04 2024-09-5 Show GitHub Exploit DB Packet Storm
311960 7.4 HIGH
Adjacent 		cisco ios_xr A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow an unauthenticated, adjacent attacker to … NVD-CWE-noinfo
CVE-2024-20317 2024-10-4 02:58 2024-09-12 Show GitHub Exploit DB Packet Storm