Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
621	-	-		-	サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01397他)による影響について	-	CVE-2025-22885 CVE-2025-27560 CVE-2025-27572 CVE-2025-27940 CVE-2025-30513 CVE-2025-31648 CVE-2025-31944 CVE-2025-32007 CVE-2025-32467	2026-05-12 11:50	2026-03-27	Show	GitHub Exploit DB Packet Storm

622	-	-		-	サーバ製品におけるインテル社公表脆弱性(INTEL-SA-01234)による影響について	-	CVE-2025-20027 CVE-2025-20028 CVE-2025-20064 CVE-2025-20068 CVE-2025-20073 CVE-2025-20105 CVE-2025-22444 CVE-2025-22850	2026-05-12 11:38	2026-04-24	Show	GitHub Exploit DB Packet Storm

623	-	-		-	サーバ製品におけるBIOSの脆弱性(CVE-2026-22796)による影響について	-	CVE-2026-22796	2026-05-12 11:38	2026-04-24	Show	GitHub Exploit DB Packet Storm

624	5.3	警告 Local	Prusa3D	PrusaSlicer	Prusa3DのPrusaSlicerにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2023-47268	2026-05-12 10:21	2026-05-8	Show	GitHub Exploit DB Packet Storm

625	7.2	重要 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2025-31974	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

626	6.1	警告 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2025-61669	2026-05-12 10:21	2026-05-5	Show	GitHub Exploit DB Packet Storm

627	8.1	重要 Network	Apache Software Foundation	CloudStack	Apache Software FoundationのCloudStackにおける不完全なクリーンアップに関する脆弱性	CWE-459 不完全なクリーンアップ	CVE-2025-66467	2026-05-12 10:21	2026-05-8	Show	GitHub Exploit DB Packet Storm

628	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71253	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

629	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71254	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

630	7.5	重要 Network	Google	Android	GoogleのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71255	2026-05-12 10:21	2026-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1101	6.5	MEDIUM Network	mongodb	mongodb	An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and …	CWE-1325 Improperly Controlled Sequential Memory Allocation	CVE-2026-8199	2026-05-14 07:31	2026-05-13	Show	GitHub Exploit DB Packet Storm

1102	6.1	MEDIUM Network	mediawiki	mediawiki	Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Actions/ActionEntryPoint.Php, includes/Request/FauxResponse.Php. This issue affects …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2026-34095	2026-05-14 07:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

1103	-		-	-	Rejected reason: This CVE is a duplicate of another CVE.	-	CVE-2026-40328	2026-05-14 07:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1104	-		-	-	Rejected reason: This CVE is a duplicate of another CVE.	-	CVE-2026-40327	2026-05-14 07:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

1105	8.8	HIGH Network	-	-	Insufficient input validation of the `plugin` parameter of the `create_user` plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.	CWE-94 Code Injection	CVE-2026-29202	2026-05-14 07:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

1106	4.3	MEDIUM Network	-	-	Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.	CWE-23 Relative Path Traversal	CVE-2026-29201	2026-05-14 07:16	2026-05-9	Show	GitHub Exploit DB Packet Storm

1107	7.5	HIGH Network	apple	ipados iphone_os macos tvos visionos watchos	A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 2…	CWE-693 Protection Mechanism Failure	CVE-2026-43660	2026-05-14 06:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

1108	7.5	HIGH Network	apple	ipados iphone_os macos tvos visionos watchos	The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2026-43658	2026-05-14 06:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

1109	4.3	MEDIUM Network	apple	ipados iphone_os macos visionos	The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2026-28971	2026-05-14 06:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

1110	7.5	HIGH Network	apple	ipados iphone_os macos visionos	This issue was addressed with improved access restrictions. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing mal…	CWE-200 Information Exposure	CVE-2026-28962	2026-05-14 06:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed