Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
61 4.4 警告
Local 		PNG Development Group
Debian		 Debian GNU/Linux
libpng 		Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-34757 2026-05-15 11:02 2026-04-9 Show GitHub Exploit DB Packet Storm
62 7.7 重要
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-34961 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
63 5.5 警告
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける無限ループに関する脆弱性 New CWE-835
無限ループ 		CVE-2026-34962 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
64 7.8 重要
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-34963 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
65 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-35439 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
66 5.9 警告
Network 		IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおける権限管理に関する脆弱性 New CWE-269
CWE-noinfo
CVE-2026-3621 2026-05-15 11:02 2026-04-23 Show GitHub Exploit DB Packet Storm
67 5.9 警告
Local 		The Go Project Go The Go ProjectのGoにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-39817 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
68 5.3 警告
Local 		The Go Project Go The Go ProjectのGoにおけるリンク解釈に関する脆弱性 New CWE-59
リンク解釈の問題 		CVE-2026-39819 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
69 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-39820 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
70 6.1 警告
Network 		The Go Project Go The Go ProjectのGoにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-39823 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311991 9.8 CRITICAL
Network 		rockwellautomation factorytalk_batch_view CVE-2024-45823 IMPACT An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could allow a threat actor to impers… NVD-CWE-noinfo
CVE-2024-45823 2024-10-2 23:49 2024-09-13 Show GitHub Exploit DB Packet Storm
311992 8.3 HIGH
Network 		nvidia nvidia_container_toolkit
nvidia_gpu_operator 		NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain acces… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-0132 2024-10-2 23:45 2024-09-26 Show GitHub Exploit DB Packet Storm
311993 3.4 LOW
Network 		nvidia nvidia_container_toolkit
nvidia_gpu_operator 		NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This d… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2024-0133 2024-10-2 23:43 2024-09-26 Show GitHub Exploit DB Packet Storm
311994 7.5 HIGH
Network 		rockwellautomation 5015-u8ihft_firmware CVE-2024-45825 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a m… NVD-CWE-noinfo
CVE-2024-45825 2024-10-2 23:43 2024-09-13 Show GitHub Exploit DB Packet Storm
311995 8.8 HIGH
Network 		rockwellautomation thinmanager CVE-2024-45826 IMPACT Due to improper input validation, a path traversal and remote code execution vulnerability exists when the ThinManager® processes a crafted POST request. If exploited, a user ca… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2024-45826 2024-10-2 23:35 2024-09-13 Show GitHub Exploit DB Packet Storm
311996 7.5 HIGH
Network 		clibomanager clibo_manager Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of servi… NVD-CWE-Other
CVE-2024-9199 2024-10-2 23:33 2024-09-26 Show GitHub Exploit DB Packet Storm
311997 5.4 MEDIUM
Network 		clibomanager clibo_manager Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored XSS ) by uploading a malicious .svg image in the section: Profile > Profile pict… CWE-79
Cross-site Scripting 		CVE-2024-9198 2024-10-2 23:33 2024-09-26 Show GitHub Exploit DB Packet Storm
311998 4.8 MEDIUM
Network 		radiustheme the_post_grid The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scrip… CWE-79
Cross-site Scripting 		CVE-2024-3635 2024-10-2 23:30 2024-09-30 Show GitHub Exploit DB Packet Storm
311999 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iommufd: Require drivers to supply the cache_invalidate_user ops If drivers don't do this then iommufd will oops invalidation ioc… CWE-476
 NULL Pointer Dereference 		CVE-2024-46824 2024-10-2 23:29 2024-09-27 Show GitHub Exploit DB Packet Storm
312000 8.1 HIGH
Network 		acquia mautic Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mautic user had, they could delete fil… CWE-22
Path Traversal 		CVE-2021-27916 2024-10-2 23:29 2024-09-18 Show GitHub Exploit DB Packet Storm