Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207011 6.8 警告 Squid-cache.org - Squid における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5400 2015-10-1 15:44 2015-07-6 Show GitHub Exploit DB Packet Storm
207012 5 警告 Novell
Standards Based Linux Instrumentation (SBLIM)
- sblim-sfcb の providerMgr.c の lookupProviders 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-5185 2015-10-1 15:38 2015-09-18 Show GitHub Exploit DB Packet Storm
207013 6.8 警告 GNU Project
Novell
- GNU C Library の gethostbyname_r およびその他の不特定の NSS 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-1781 2015-10-1 15:16 2015-08-14 Show GitHub Exploit DB Packet Storm
207014 5 警告 GNU Project - GNU screen の ansi.c の MScrollV 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-6806 2015-10-1 14:57 2015-08-31 Show GitHub Exploit DB Packet Storm
207015 6.5 警告 Open-Xchange - Open-Xchange OX Guard の公開鍵開示の API コールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-5703 2015-10-1 14:57 2015-08-3 Show GitHub Exploit DB Packet Storm
207016 3.6 注意 OpenVZ - vzctl における任意の ploop コンテナの root パスワードを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2015-6927 2015-10-1 14:45 2015-08-26 Show GitHub Exploit DB Packet Storm
207017 5 警告 AdNovum Informatik AG - AdNovum nevisAuth の SAML 2.0 の実装における任意の SAML アサーションを挿入される脆弱性 CWE-287
不適切な認証
CVE-2015-5372 2015-10-1 14:27 2015-09-21 Show GitHub Exploit DB Packet Storm
207018 7.2 危険 Fabrice Bellard - QEMU の hw/net/ne2000.c の ne2000_receive 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5279 2015-10-1 14:06 2015-09-15 Show GitHub Exploit DB Packet Storm
207019 7.5 危険 Lars Jung - h5ai における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-3203 2015-10-1 13:57 2015-09-22 Show GitHub Exploit DB Packet Storm
207020 7.5 危険 Zoho Corporation - ZOHO ManageEngine EventLog Analyzer における制限を回避される脆弱性 CWE-89
SQLインジェクション
CVE-2015-7387 2015-10-1 13:48 2015-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 8.2 HIGH
Network
- - Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not r… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42260 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
472 7.3 HIGH
Network
- - D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection. New CWE-77
Command Injection
CVE-2026-36983 2026-05-13 00:16 2026-05-12 Show GitHub Exploit DB Packet Storm
473 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel … New CWE-89
SQL Injection
CVE-2026-32687 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
474 6.8 MEDIUM
Network
- - Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_expor… New CWE-22
Path Traversal
CVE-2026-43901 2026-05-13 00:15 2026-05-12 Show GitHub Exploit DB Packet Storm
475 4.3 MEDIUM
Network
- - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/filesystem/pathexists endpoint uses String.startsWith() to validate that a resolved file path is within a … New CWE-22
Path Traversal
CVE-2026-42885 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
476 - - - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without suf… New CWE-22
Path Traversal
CVE-2026-42888 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
477 6.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail(), which s… New CWE-79
Cross-site Scripting
CVE-2026-43876 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
478 5.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metad… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-43879 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
479 4.3 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, the unauthenticated plugin/Scheduler/downloadICS.php endpoint passes attacker-controlled title, description, and jo… New CWE-93
CRLF Injection
CVE-2026-43882 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
480 - - - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read APISecret from objects/plugins.json.php and use it to call protected API endpoints… New CWE-200
CWE-862
Information Exposure
 Missing Authorization
CVE-2026-43885 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm