Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
197741 8.8 重要
Network
eClinicalWorks - eClinicalWorks Patient Portal の messageJson.jsp におけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5570 2017-02-6 13:48 2017-01-23 Show GitHub Exploit DB Packet Storm
197742 9.8 緊急
Network
eClinicalWorks - eClinicalWorks Patient Portal の template.jsp におけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5569 2017-02-6 13:48 2017-01-23 Show GitHub Exploit DB Packet Storm
197743 8.8 重要
Network
LibTIFF - LibTIFF の tif_lzw.c におけるヒープベースのバッファオーバーリードの脆弱性 CWE-119
バッファエラー
CVE-2017-5563 2017-02-6 13:48 2017-01-18 Show GitHub Exploit DB Packet Storm
197744 8.1 重要
Network
Foxit Software Inc - Windows 上で稼動する Foxit Reader および PhantomPDF の ConvertToPDF プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-5556 2017-02-6 13:48 2017-01-10 Show GitHub Exploit DB Packet Storm
197745 8.1 重要
Network
OnePlus - OnePlus 3 および 3T の OxygenOS の ABOOT における認証なしで fastboot モードでデバイスをリブートされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5554 2017-02-6 13:48 2017-01-11 Show GitHub Exploit DB Packet Storm
197746 5.4 警告
Network
b2evolution - b2evolution の plugins/markdown_plugin/_markdown.plugin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5553 2017-02-6 13:48 2017-01-19 Show GitHub Exploit DB Packet Storm
197747 9.1 緊急
Network
libimobiledevice - libimobiledevice libplist の plistutil.c の main 関数におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-125
境界外読み取り
CVE-2017-5545 2017-02-6 13:48 2017-01-18 Show GitHub Exploit DB Packet Storm
197748 5.9 警告
Network
FiberHome Technologies Group - FiberHome Fengine S5800 スイッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5544 2017-02-6 13:48 2017-01-23 Show GitHub Exploit DB Packet Storm
197749 9.1 緊急
Network
b2evolution - b2evolution における全てのファイルを削除される脆弱性 CWE-200
CWE-284
CVE-2017-5539 2017-02-6 13:48 2017-01-19 Show GitHub Exploit DB Packet Storm
197750 7.5 重要
Network
マイクロフォーカス株式会社 - Linux 用 Open Enterprise Server の Remote Manager におけるディレクトリトラバーサルの脆弱性 CWE-200
CWE-22
CVE-2017-5182 2017-02-6 13:48 2017-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1111 9.9 CRITICAL
Network
- - Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects witho… New CWE-284
Improper Access Control
CVE-2026-7813 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1112 - - - An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via … New CWE-79
Cross-site Scripting
CVE-2026-7308 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1113 - - - jq is a command-line JSON processor. In 1.8.2rc1 and earlier, the ordinary module loader recurses without cycle detection when two otherwise valid modules include each other. New CWE-674
 Uncontrolled Recursion
CVE-2026-44777 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1114 4.7 MEDIUM
Network
- - Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address bar and shows only the attacker-controlled prefix of the subdomain, hiding the a… New CWE-451
 User Interface (UI) Misrepresentation of Critical Information
CVE-2026-44659 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1115 2.4 LOW
Network
- - Zen is a firefox-based browser. Prior to 1.19.12b, RSS feed URLs entered by the user are validated to http: or https: in promptForFeedUrl, but item links inside the feed are not subject to the same r… New CWE-20
 Improper Input Validation 
CVE-2026-44658 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1116 5.3 MEDIUM
Network
- - pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, pyload-ng WebUI returns full Python traceback details to clients on unhandled exceptions. Because /web/<p… New CWE-209
Information Exposure Through an Error Message
CVE-2026-44226 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1117 - - - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implementations directly import and invoke raw HTTP clients (node-fetch, axios) … New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-43995 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1118 4.4 MEDIUM
Local
- - jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string operations during mo… New CWE-20
CWE-158
 Improper Input Validation 
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43895 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1119 6.2 MEDIUM
Local
- - jq is a command-line JSON processor. In 1.8.1 and earlier, when decNumberFromString is given a number literal of INT_MAX-1 (2147483646) digits, the D2U() macro overflows during signed-int arithmetic.… New CWE-190
 Integer Overflow or Wraparound
CVE-2026-43894 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1120 8.1 HIGH
Network
- - Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenticated user with SCIM management … New CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-43640 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm