Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203521 6.9 警告 IBM - Windows 上で稼動する IBM Informix Dynamic Server のクライアント実装における権限を取得される脆弱性 CWE-Other
その他 		CVE-2016-0226 2016-03-30 11:01 2016-03-21 Show GitHub Exploit DB Packet Storm
203522 2.1 注意 アップル - Apple iOS の LaunchServices の XPC Services API におけるイベントハンドラの制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-1760 2016-03-30 11:00 2016-03-21 Show GitHub Exploit DB Packet Storm
203523 3.5 注意 シスコシステムズ - Cisco Unified Communications Domain Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1314 2016-03-30 10:48 2016-03-28 Show GitHub Exploit DB Packet Storm
203524 5.5 警告 Granite Data Services - Granite Data Services に XML 外部実体参照 (XXE) に関する脆弱性 CWE-Other
その他 		CVE-2016-2340 2016-03-29 16:15 2016-03-24 Show GitHub Exploit DB Packet Storm
203525 9.3 危険 アップル - Apple iOS などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1727 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
203526 9.3 危険 アップル - Apple iOS および Safari などで使用される WebKit における任意のコードを実行される脆弱性が存在します。 CWE-119
バッファエラー 		CVE-2016-1726 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
203527 9.3 危険 アップル - Apple iOS および Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1725 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
203528 9.3 危険 アップル - Apple iOS などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1724 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
203529 9.3 危険 アップル - Apple iOS および Safari などで使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-1723 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
203530 7.2 危険 アップル - 複数の Apple 製品の syslog における権限を取得される脆弱性 CWE-119
CWE-264
CVE-2016-1722 2016-03-29 15:44 2016-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 8.3 HIGH
Network 		- - pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … New CWE-441
CWE-863
CWE-918
Confused Deputy
 Incorrect Authorization
Server-Side Request Forgery (SSRF)  		CVE-2026-42313 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
72 6.8 MEDIUM
Network 		- - pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … New CWE-295
CWE-306
CWE-863
Improper Certificate Validation 
Missing Authentication for Critical Function
 Incorrect Authorization 		CVE-2026-42312 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
73 8.0 HIGH
Network 		- - Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification stripped from the Fi… New CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-41431 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
74 - - - jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond ≈1 GiB (via deeply nested generator … New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-41257 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
75 5.5 MEDIUM
Local 		- - jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter fil… New CWE-158
 Improper Neutralization of Null Byte or NUL Character 		CVE-2026-41256 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
76 5.7 MEDIUM
Network 		- - Taiga is a project management platform for startups and agile developers. Prior 6.9.1, Taiga front is vulnerable to stored XSS. This vulnerability is fixed in 6.9.1. New CWE-79
Cross-site Scripting 		CVE-2026-41250 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
77 - - - jq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure (built programmatically with… New CWE-674
 Uncontrolled Recursion 		CVE-2026-40612 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
78 - - - Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege Escalation Vulnerability provides access to IRP_MJ_REITS command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Cr… New - CVE-2026-3609 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
79 - - - An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections … New CWE-502
CWE-918
 Deserialization of Untrusted Data
Server-Side Request Forgery (SSRF)  		CVE-2026-3048 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
80 - - - HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add. New - CVE-2026-38569 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm