Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
711 3.3 低
Local 		- デルのemc powerscale onefs　における不十分なロギングに関する脆弱性 CWE-778
不十分なロギング 		CVE-2026-32803 2026-05-11 11:11 2026-05-8 Show GitHub Exploit DB Packet Storm
712 7.5 重要
Network 		coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-32934 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
713 7.5 重要
Network 		coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-32936 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
714 9.9 緊急
Network 		マイクロソフト Azure Managed Instance for Apache Cassandra Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability CWE-284
不適切なアクセス制御 		CVE-2026-33109 2026-05-11 11:11 2026-05-7 Show GitHub Exploit DB Packet Storm
715 7.5 重要
Network 		coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題 		CVE-2026-33190 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
716 8.8 重要
Network 		FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33324 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
717 5.3 警告
Network 		Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-33420 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
718 7.5 重要
Network 		coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33489 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
719 6.5 警告
Network 		マイクロソフト Microsoft Teams Microsoft Team Events Portal Information Disclosure Vulnerability CWE-285
不適切な認可 		CVE-2026-33823 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
720 9 緊急
Network 		マイクロソフト Azure Managed Instance for Apache Cassandra Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability CWE-20
不適切な入力確認 		CVE-2026-33844 2026-05-11 11:10 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 6.4 MEDIUM
Adjacent 		- - Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations.… Update CWE-284
CWE-863
Improper Access Control
 Incorrect Authorization 		CVE-2025-9973 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1142 6.1 MEDIUM
Local 		- - Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue stack. Because the d… Update CWE-674
 Uncontrolled Recursion 		CVE-2026-1681 2026-05-14 00:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1143 8.3 HIGH
Network 		- - Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/use… Update CWE-269
 Improper Privilege Management 		CVE-2026-42562 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1144 - - - Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escal… Update CWE-863
 Incorrect Authorization 		CVE-2026-42571 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1145 7.5 HIGH
Network 		- - apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target poi… Update CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2026-42574 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1146 6.5 MEDIUM
Network 		- - apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, DiscoverKeys in pkg/apk/apk/implementation.go unconditionally type-asserts JWKS keys as *r… Update CWE-704
 Incorrect Type Conversion or Cast 		CVE-2026-42576 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1147 7.5 HIGH
Network 		- - apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, apko verifies the signature on APKINDEX.tar.gz but never compares individually downloaded … Update CWE-345
CWE-494
 Insufficient Verification of Data Authenticity
 Download of Code Without Integrity Check 		CVE-2026-42575 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
1148 7.5 HIGH
Network 		golang go The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0). Update CWE-476
 NULL Pointer Dereference 		CVE-2026-39836 2026-05-14 00:11 2026-05-8 Show GitHub Exploit DB Packet Storm
1149 7.5 HIGH
Network 		golang go Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-39820 2026-05-14 00:10 2026-05-8 Show GitHub Exploit DB Packet Storm
1150 5.3 MEDIUM
Local 		golang go The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to the temporary directory can create a symlink in one… Update CWE-59
Link Following 		CVE-2026-39819 2026-05-14 00:05 2026-05-8 Show GitHub Exploit DB Packet Storm