Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
451 5.5 警告
Local 		インテル Intel QuickAssist Technology インテルのIntel QuickAssist TechnologyにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-20914 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
452 7.2 重要
Network 		strapi strapi strapiにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2026-22599 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
453 6.5 警告
Network 		strapi strapi strapiにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2026-22706 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
454 5.4 警告
Network 		strapi strapi strapiにおける複数の脆弱性 New CWE-434
CWE-693
CVE-2026-22707 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
455 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-23824 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
456 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における入力確認に関する脆弱性 New CWE-20
不適切な入力確認 		CVE-2026-23825 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
457 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23826 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
458 7.5 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-23827 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
459 7.5 重要
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-23998 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
460 5.3 警告
Network 		Fleet Device Management fleet Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性 New CWE-290
スプーフィングによる認証回避 		CVE-2026-24000 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311861 7.2 HIGH
Network 		cisco unified_computing_system A vulnerability in the Redfish API of Cisco UCS B-Series, Cisco UCS Managed C-Series, and Cisco UCS X-Series Servers could allow an authenticated, remote attacker with administrative privileges to pe… CWE-77
Command Injection 		CVE-2024-20365 2024-10-8 23:28 2024-10-3 Show GitHub Exploit DB Packet Storm
311862 6.1 MEDIUM
Network 		sulu sulu Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle comp… CWE-79
Cross-site Scripting 		CVE-2024-47617 2024-10-8 23:23 2024-10-4 Show GitHub Exploit DB Packet Storm
311863 5.9 MEDIUM
Network 		cisco nexus_dashboard_orchestrator A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device.&n… CWE-295
Improper Certificate Validation  		CVE-2024-20385 2024-10-8 23:22 2024-10-3 Show GitHub Exploit DB Packet Storm
311864 7.5 HIGH
Network 		hypestudio social_web_suite The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log fu… CWE-22
Path Traversal 		CVE-2024-8352 2024-10-8 23:17 2024-10-3 Show GitHub Exploit DB Packet Storm
311865 8.8 HIGH
Network 		cisco nexus_dashboard_fabric_controller A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, low-privileged, remote attacker to perform a command injection attack agains… CWE-77
Command Injection 		CVE-2024-20432 2024-10-8 23:10 2024-10-3 Show GitHub Exploit DB Packet Storm
311866 5.4 MEDIUM
Network 		cisco nexus_dashboard
nexus_dashboard_fabric_controller 		A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device. This vulnerability exists becaus… CWE-862
 Missing Authorization 		CVE-2024-20438 2024-10-8 22:54 2024-10-3 Show GitHub Exploit DB Packet Storm
311867 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20521 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311868 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20520 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311869 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20519 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm
311870 9.1 CRITICAL
Network 		cisco rv042_firmware
rv042g_firmware
rv320_firmware
rv325_firmware 		A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arb… CWE-787
 Out-of-bounds Write 		CVE-2024-20518 2024-10-8 22:50 2024-10-3 Show GitHub Exploit DB Packet Storm