Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207041 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5568 2015-09-25 15:37 2015-09-21 Show GitHub Exploit DB Packet Storm
207042 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-5567 2015-09-25 15:37 2015-09-21 Show GitHub Exploit DB Packet Storm
207043 4.3 警告 アップル - Apple iOS などで使用される WebKit における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-5921 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207044 2.6 注意 アップル - Apple iOS などで使用される WebKit におけるリダイレクション攻撃を実行される脆弱性 CWE-310
暗号の問題 		CVE-2015-5907 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207045 5 警告 アップル - Apple iOS などで使用される WebKit の HTML フォームの実装におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-5906 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207046 5 警告 アップル - Apple iOS の Safari における URL と Web コンテンツとの関係を偽装される脆弱性 CWE-Other
その他 		CVE-2015-5905 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207047 4.3 警告 アップル - Apple iOS の Safari における URL と Web コンテンツとの関係を偽装される脆弱性 CWE-Other
その他 		CVE-2015-5904 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207048 10 危険 アップル
SQLite		 - Apple iOS で使用される SQLite における脆弱性 CWE-noinfo
情報不足 		CVE-2015-5895 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207049 2.1 注意 アップル - Apple iOS の Siri におけるクライアントサイドの保護メカニズムを回避される脆弱性 CWE-200
情報漏えい 		CVE-2015-5892 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
207050 4.3 警告 アップル - Apple iOS の CoreAnimation における IOSurface の制限を回避される脆弱性 CWE-200
情報漏えい 		CVE-2015-5880 2015-09-25 15:01 2015-09-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
131 - - - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rendered image HTML thro… New CWE-79
Cross-site Scripting 		CVE-2026-42841 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
132 6.5 MEDIUM
Network 		- - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restrictions by utilizing … New CWE-863
 Incorrect Authorization 		CVE-2026-42610 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
133 - - - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, there is a Path Traversal vulnerability within the FormFlash core component. By manipulating the session_id (passed as __form-flash-id in POS… New CWE-22
Path Traversal 		CVE-2026-42608 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
134 4.3 MEDIUM
Network 		- - AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, GET /api/workspace/:slug/tts/:chatId in AnythingLL… New CWE-200
CWE-639
Information Exposure
 Authorization Bypass Through User-Controlled Key 		CVE-2026-42456 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
135 - - - Clerk JavaScript is the official JavaScript repository for Clerk authentication. has(), auth.protect(), and related authorization predicates in @clerk/shared, @clerk/nextjs, @clerk/backend, and other… New CWE-754
CWE-863
 Improper Check for Unusual or Exceptional Conditions
 Incorrect Authorization 		CVE-2026-42349 2026-05-12 02:16 2026-05-12 Show GitHub Exploit DB Packet Storm
136 - - - New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. In versions 0.11.9-alpha.1 and prior, the SSRF protection introduced in v0.9.0.5 (CVE-2025-591… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42339 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
137 - - - Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, the Webhook Interceptor loads the entire request b… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42294 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
138 6.5 MEDIUM
Network 		- - FlashMQ is a MQTT broker/server, designed for multi-CPU environments. Prior to version 1.26.1, a remote client with retained publish permission can crash the FlashMQ broker when both set_retained_mes… New CWE-369
 Divide By Zero 		CVE-2026-42209 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
139 6.2 MEDIUM
Local 		- - Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and … New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42199 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
140 6.5 MEDIUM
Network 		- - Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy fetches metadata for user-supplied post URLs and, under the default StoreLinkPreviews image mode, downloads the… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42181 2026-05-12 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm