Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
191251	9.8	緊急 Network	Schneider Electric	-	Schneider Electric Modicon Modbus Protocol における認証に関する脆弱性	CWE-287 不適切な認証	CVE-2017-6034	2017-07-25 14:14	2017-04-11	Show	GitHub Exploit DB Packet Storm

191252	5.3	警告 Network	Schneider Electric	-	Schneider Electric Modicon Modbus Protocol におけるセキュリティチェックに関する脆弱性	CWE-358 不適切に実装されたセキュリティチェック	CVE-2017-6032	2017-07-25 14:14	2017-04-11	Show	GitHub Exploit DB Packet Storm

191253	5.4	警告 Network	Biscom	-	Biscom Secure File Transfer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-5241	2017-07-25 14:14	2017-06-30	Show	GitHub Exploit DB Packet Storm

191254	7.8	危険	日本電気 IBM Apache Software Foundation アップルサイバートラスト株式会社富士通リコーヒューレット・パッカードオラクル日立レッドハット	-	Apache HTTPD サーバにサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3192	2017-07-25 13:51	2011-08-29	Show	GitHub Exploit DB Packet Storm

191255	9.8	緊急 Network	日本電気 Apache Software Foundation	-	Apache httpd における NULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2017-3169	2017-07-25 13:50	2017-06-20	Show	GitHub Exploit DB Packet Storm

191256	5.9	警告 Network	日本電気 OpenSSL Project	-	OpenSSL の DTLS の実装の statem/statem_dtls.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-6308	2017-07-25 13:48	2016-09-22	Show	GitHub Exploit DB Packet Storm

191257	5.9	警告 Network	日本電気 OpenSSL Project	-	OpenSSL のステートマシンの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-6307	2017-07-25 13:48	2016-09-22	Show	GitHub Exploit DB Packet Storm

191258	5.9	警告 Network	Node.js Foundation 日本電気 OpenSSL Project SUSE 日立	-	OpenSSL の証明書のパーサにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-6306	2017-07-25 13:48	2016-09-22	Show	GitHub Exploit DB Packet Storm

191259	7.5	重要 Network	日本電気 OpenSSL Project	-	OpenSSL の DTLS の実装のアンチリプレイ機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2016-2181	2017-07-25 13:48	2016-08-19	Show	GitHub Exploit DB Packet Storm

191260	7.8	重要 Local	Linux 日本電気 Debian Canonical レッドハット	-	Linux カーネルのメモリサブシステムに実装されている copy-on-write 機構に競合状態が発生する脆弱性	CWE-362 競合状態	CVE-2016-5195	2017-07-25 13:45	2016-10-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
91	8.8	HIGH Network	-	-	Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network. New	CWE-78 CWE-384 OS Command Session Fixation	CVE-2026-41613	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

92	5.5	MEDIUM Local	-	-	Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally. New	CWE-22 CWE-23 Path Traversal Relative Path Traversal	CVE-2026-41612	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

93	7.8	HIGH Local	-	-	Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally. New	CWE-77 CWE-80 Command Injection Basic XSS	CVE-2026-41611	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

94	6.3	MEDIUM Local	-	-	Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. New	CWE-59 CWE-79 CWE-200 Link Following Cross-site Scripting Information Exposure	CVE-2026-41610	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

95	-		-	-	Horilla is an HR and CRM software. In 1.5.0, the notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted app… New	CWE-601 Open Redirect	CVE-2026-41513	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

96	-		-	-	Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0… New	CWE-20 Improper Input Validation	CVE-2026-41293	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

97	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 t… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-41284	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

98	5.7	MEDIUM Network	-	-	Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1. New	CWE-79 Cross-site Scripting	CVE-2026-41250	2026-05-13 03:17	2026-05-12	Show	GitHub Exploit DB Packet Storm

99	8.8	HIGH Network	-	-	Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature ove… New	CWE-74 Injection	CVE-2026-41109	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

100	7.4	HIGH Network	-	-	External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. New	CWE-73 External Control of File Name or Path	CVE-2026-41107	2026-05-13 03:17	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed