Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
561	6.5	警告 Network	フォーティネット	FortiDeceptor	フォーティネットのFortiDeceptorにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-25690	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

562	6.5	警告 Network	Fleet Device Management	fleet	Fleet Device Managementのfleetにおける入力確認に関する脆弱性	CWE-20 CWE-noinfo	CVE-2026-26062	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

563	9.8	緊急 Network	Fleet Device Management	fleet	Fleet Device ManagementのfleetにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26191	2026-05-20 13:21	2026-05-14	Show	GitHub Exploit DB Packet Storm

564	8.6	重要 Network	lfprojects	mlflow	lfprojectsのmlflowにおける根本の脆弱性による認証回避の脆弱性	CWE-305 根本の脆弱性による認証回避	CVE-2026-2652	2026-05-20 13:21	2026-05-15	Show	GitHub Exploit DB Packet Storm

565	9.1	緊急 Network	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品における余分なパラメータの不適切な処理に関する脆弱性	CWE-235 余分なパラメータの不適切な処理	CVE-2026-27851	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

566	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-28759	2026-05-20 13:21	2026-05-18	Show	GitHub Exploit DB Packet Storm

567	5.5	警告 Local	マイクロソフト	Microsoft Teams	Microsoft Teams のなりすましの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-32185	2026-05-20 13:21	2026-05-12	Show	GitHub Exploit DB Packet Storm

568	7.2	重要 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33518	2026-05-20 13:21	2026-04-21	Show	GitHub Exploit DB Packet Storm

569	9.8	緊急 Network	Esri	Portal for ArcGIS	EsriのPortal for ArcGISにおける不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-33519	2026-05-20 13:20	2026-04-21	Show	GitHub Exploit DB Packet Storm

570	5.3	警告 Adjacent	Timo Sirainen Open-Xchange	Dovecot Pro Dovecot	Timo Sirainen等の複数ベンダの製品におけるリソースの挿入に関する脆弱性	CWE-99 リソースの挿入	CVE-2026-33603	2026-05-20 13:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1461	-	-	-	An unchecked return value within the AMD Platform Management Framework (PMF) could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution.	CWE-252 Unchecked Return Value	CVE-2025-29938	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1462	-	-	-	A buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to write out of bounds, potentially resulting in denial of service or crash	CWE-120 Classic Buffer Overflow	CVE-2025-29944	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1463	-	-	-	Use of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an attacker to read a uninitialized kernel memory resulting in loss of confidentiality or availability.	CWE-908 Use of Uninitialized Resource	CVE-2025-48513	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1464	-	-	-	Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent…	CWE-276 Incorrect Default Permissions	CVE-2025-48516	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1465	-	-	-	Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and successfully write dat…	CWE-274 Improper Handling of Insufficient Privileges	CVE-2025-54511	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1466	-	-	-	Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.	CWE-787 Out-of-bounds Write	CVE-2025-54517	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1467	-	-	-	Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect shared memory mapping, potentially resulting…	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2025-66660	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1468	-	-	-	Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW SR-IOV command to cause out-of-bounds read,…	CWE-125 Out-of-bounds Read	CVE-2025-66664	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1469	-	-	-	Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potent…	CWE-459 Incomplete Cleanup	CVE-2026-0427	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm

1470	-	-	-	Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulti…	CWE-1284 Improper Validation of Specified Quantity in Input	CVE-2026-0428	2026-05-15 23:10	2026-05-15	Show	GitHub Exploit DB Packet Storm