Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
861 7.3 重要
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
862 9.8 緊急
Network
archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
863 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
864 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
865 9.9 緊急
Network
マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
866 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows テレフォニー サービスの特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-42825 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
867 6.5 警告
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの拡張機能の特権昇格の脆弱性 CWE-426
信頼性のない検索パス
CVE-2026-42830 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
868 9.1 緊急
Network
マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性 CWE-250
CWE-noinfo
CVE-2026-42833 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
869 5.4 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の特権の昇格の脆弱性 CWE-74
インジェクション
CVE-2026-42838 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
870 6.5 警告
Network
Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-42891 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311441 6.5 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the create_mollie_profile function in versions … CWE-862
 Missing Authorization
CVE-2023-7294 2024-10-18 02:34 2024-10-16 Show GitHub Exploit DB Packet Storm
311442 4.3 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_mollie_account_details function in versi… CWE-862
 Missing Authorization
CVE-2023-7293 2024-10-18 02:33 2024-10-16 Show GitHub Exploit DB Packet Storm
311443 4.4 MEDIUM
Local
google android In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System execution privileges needed. CWE-476
 NULL Pointer Dereference
CVE-2024-39440 2024-10-18 02:33 2024-10-9 Show GitHub Exploit DB Packet Storm
311444 4.3 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on the paytium_notice_dismiss function in ver… CWE-862
 Missing Authorization
CVE-2023-7292 2024-10-18 02:32 2024-10-16 Show GitHub Exploit DB Packet Storm
311445 4.4 MEDIUM
Local
google android In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. CWE-787
 Out-of-bounds Write
CVE-2024-39439 2024-10-18 02:32 2024-10-9 Show GitHub Exploit DB Packet Storm
311446 8.1 HIGH
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the create_mollie_account function in versio… CWE-862
 Missing Authorization
CVE-2023-7291 2024-10-18 02:31 2024-10-16 Show GitHub Exploit DB Packet Storm
311447 4.3 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_for_verified_profiles function in versio… CWE-862
 Missing Authorization
CVE-2023-7290 2024-10-18 02:30 2024-10-16 Show GitHub Exploit DB Packet Storm
311448 4.3 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytium_sw_save_api_keys function in versions … CWE-862
 Missing Authorization
CVE-2023-7289 2024-10-18 02:29 2024-10-16 Show GitHub Exploit DB Packet Storm
311449 5.4 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on the pt_cancel_subscription function in … CWE-862
 Missing Authorization
CVE-2023-7287 2024-10-18 02:28 2024-10-16 Show GitHub Exploit DB Packet Storm
311450 4.3 MEDIUM
Network
paytium paytium The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the update_profile_preference function in versi… CWE-862
 Missing Authorization
CVE-2023-7288 2024-10-18 02:27 2024-10-16 Show GitHub Exploit DB Packet Storm