Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
891	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44197	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

892	4.3	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44198	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

893	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44199	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

894	6.5	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44200	2026-05-14 10:16	2026-05-11	Show	GitHub Exploit DB Packet Storm

895	5.3	警告 Network	Torchbox	Wagtail	TorchboxのWagtailにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性	CWE-280 権限管理不備	CVE-2026-44201	2026-05-14 10:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

896	7.5	重要 Network	JetBrains	TeamCity	JetBrainsのTeamCityにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-44413	2026-05-14 10:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

897	5.3	警告 Network	uriparser project	uriparser	uriparser projectのuriparserにおける数値打ち切り誤差に関する脆弱性	CWE-197 数値打ち切り誤差	CVE-2026-44927	2026-05-14 10:15	2026-05-8	Show	GitHub Exploit DB Packet Storm

898	5.3	警告 Network	uriparser project	uriparser	uriparser projectのuriparserにおける常に不適切な制御フローの実装に関する脆弱性	CWE-670 常に不適切な制御フローの実装	CVE-2026-44928	2026-05-14 10:15	2026-05-8	Show	GitHub Exploit DB Packet Storm

899	9.8	緊急 Network	digiwin	easyflow .net	digiwinのeasyflow .netにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-5963	2026-05-14 10:15	2026-04-20	Show	GitHub Exploit DB Packet Storm

900	9.8	緊急 Network	digiwin	easyflow .net	digiwinのeasyflow .netにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-5964	2026-05-14 10:15	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
312091	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix bridge mode operations when there are no VFs Currently, trying to set the bridge mode attribute when numvfs=0 leads…	CWE-476 NULL Pointer Dereference	CVE-2024-46857	2024-10-2 02:10	2024-09-27	Show	GitHub Exploit DB Packet Storm

312092	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire() If the __qcuefi pointer is not set, then in the original code, we wo…	CWE-667 Improper Locking	CVE-2024-46868	2024-10-2 02:09	2024-09-27	Show	GitHub Exploit DB Packet Storm

312093	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: fix deadlock in show_meminfo() There is a real deadlock as well as sleeping in atomic() bug in here, if the bo put…	CWE-667 Improper Locking	CVE-2024-46867	2024-10-2 02:09	2024-09-27	Show	GitHub Exploit DB Packet Storm

312094	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: drm/xe/client: add missing bo locking in show_meminfo() bo_meminfo() wants to inspect bo state like tt and the ttm resource, howe…	CWE-667 Improper Locking	CVE-2024-46866	2024-10-2 02:09	2024-09-27	Show	GitHub Exploit DB Packet Storm

312095	6.5	MEDIUM Network	devolutions	devolutions_server	Authorization bypass in the PAM access request approval mechanism in Devolutions Server 2024.2.10 and earlier allows authenticated users with permissions to approve their own requests, bypassing inte…	CWE-863 Incorrect Authorization	CVE-2024-6512	2024-10-2 01:36	2024-09-25	Show	GitHub Exploit DB Packet Storm

312096	9.8	CRITICAL Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	An attacker can directly request the ProGauge MAGLINK LX CONSOLE resource sub page with full privileges by requesting the URL directly.	NVD-CWE-Other	CVE-2024-43692	2024-10-2 01:22	2024-09-25	Show	GitHub Exploit DB Packet Storm

312097	9.8	CRITICAL Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	A specially crafted POST request to the ProGauge MAGLINK LX CONSOLE IP sub-menu can allow a remote attacker to inject arbitrary commands.	CWE-77 Command Injection	CVE-2024-45066	2024-10-2 01:18	2024-09-25	Show	GitHub Exploit DB Packet Storm

312098	8.8	HIGH Network	doverfuelingsolutions	progauge_maglink_lx_console_firmware progauge_maglink_lx4_console_firmware	Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.	NVD-CWE-noinfo	CVE-2024-45373	2024-10-2 01:13	2024-09-25	Show	GitHub Exploit DB Packet Storm

312099	9.1	CRITICAL Network	watchguard	single_sign-on_client authentication_gateway	Incorrect Authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Win…	CWE-863 Incorrect Authorization	CVE-2024-6592	2024-10-2 01:06	2024-09-25	Show	GitHub Exploit DB Packet Storm

312100	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix NULL pointer dereference on DP83825 devices The probe() function is only used for DP83822 and DP83826 PHY,…	CWE-476 NULL Pointer Dereference	CVE-2024-46856	2024-10-2 01:04	2024-09-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed