Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 5.3 警告
Network 		The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-39825 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
72 6.1 警告
Network 		The Go Project Go The Go ProjectのGoにおけるエンコードおよびエスケープに関する脆弱性 New CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-39826 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
73 7.5 重要
Network 		The Go Project Go The Go ProjectのGoにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-39836 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
74 4.3 警告
Network 		アップル tvOS
iOS
watchOS
visionos
iPadOS 		アップルのiPadOS等の複数製品における古典的バッファオーバーフローの脆弱性 New CWE-120
古典的バッファオーバーフロー 		CVE-2026-39869 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
75 7.5 重要
Network 		- アップルのmacOSにおけるバッファエラーの脆弱性 New CWE-119
バッファエラー 		CVE-2026-39870 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
76 6.8 警告
Physics 		ZTE ZX297520V3 ファームウェア ZTEのZX297520V3 ファームウェアにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-40003 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
77 7.8 重要
Local 		ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性 New CWE-427
制御されていない検索パスの要素 		CVE-2026-40004 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
78 6.5 警告
Network 		Zulip Zulip Server ZulipのZulip Serverにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-40300 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
79 6.5 警告
Network 		NocoBase NocoBase NocoBaseにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40346 2026-05-15 11:01 2026-04-18 Show GitHub Exploit DB Packet Storm
80 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40357 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311961 5.4 MEDIUM
Network 		cisco catalyst_sd-wan_manager A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to conduct a cross-site scripting … CWE-79
Cross-site Scripting 		CVE-2024-20475 2024-10-4 02:49 2024-09-26 Show GitHub Exploit DB Packet Storm
311962 8.0 HIGH
Adjacent 		autel maxicharger_ac_elite_business_c50_firmware Autel MaxiCharger AC Elite Business C50 BLE AppChargingControl Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… CWE-787
 Out-of-bounds Write 		CVE-2024-23959 2024-10-4 02:42 2024-09-28 Show GitHub Exploit DB Packet Storm
311963 8.8 HIGH
Adjacent 		autel maxicharger_ac_elite_business_c50_firmware Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected instal… CWE-798
 Use of Hard-coded Credentials 		CVE-2024-23958 2024-10-4 02:42 2024-09-28 Show GitHub Exploit DB Packet Storm
311964 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attem… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2024-44969 2024-10-4 02:38 2024-09-5 Show GitHub Exploit DB Packet Storm
311965 8.0 HIGH
Adjacent 		autel maxicharger_ac_elite_business_c50_firmware Autel MaxiCharger AC Elite Business C50 WebSocket Base64 Decoding Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbi… CWE-787
 Out-of-bounds Write 		CVE-2024-23967 2024-10-4 02:37 2024-09-28 Show GitHub Exploit DB Packet Storm
311966 8.8 HIGH
Adjacent 		autel maxicharger_ac_elite_business_c50_firmware Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2024-23957 2024-10-4 02:37 2024-09-28 Show GitHub Exploit DB Packet Storm
311967 4.3 MEDIUM
Network 		hasthemes ht_mega The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.5 via the render function in includes/widget… NVD-CWE-noinfo
CVE-2024-8910 2024-10-4 02:34 2024-09-25 Show GitHub Exploit DB Packet Storm
311968 8.8 HIGH
Adjacent 		silabs gecko_os Silicon Labs Gecko OS Debug Interface Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected insta… CWE-787
 Out-of-bounds Write 		CVE-2024-23938 2024-10-4 02:29 2024-09-28 Show GitHub Exploit DB Packet Storm
311969 5.3 MEDIUM
Network 		wpfactory eu\/uk_vat_manager_for_woocommerce The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function i… CWE-862
 Missing Authorization 		CVE-2024-9189 2024-10-4 02:26 2024-09-28 Show GitHub Exploit DB Packet Storm
311970 6.1 MEDIUM
Network 		wpfactory eu\/uk_vat_manager_for_woocommerce The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up t… CWE-79
Cross-site Scripting 		CVE-2024-8788 2024-10-4 02:25 2024-09-28 Show GitHub Exploit DB Packet Storm