Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207081 7.2 危険 Silicon Integrated Systems Corp., - Silicon Integrated Systems WindowsXP Display Manager における権限を取得される脆弱性 CWE-Other
その他
CVE-2015-5465 2015-09-18 15:35 2015-09-1 Show GitHub Exploit DB Packet Storm
207082 4.3 警告 ノキア - Nokia Networks @vantage Commander におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-6929 2015-09-18 15:17 2015-09-9 Show GitHub Exploit DB Packet Storm
207083 6.5 警告 Nibbleblog - Nibbleblog の My Image プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-6967 2015-09-18 15:05 2015-09-7 Show GitHub Exploit DB Packet Storm
207084 3.5 注意 TYPO3 Association - TYPO3 の sanitizeLocalUrl 関数における XSS フィルタを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5956 2015-09-18 14:34 2015-09-8 Show GitHub Exploit DB Packet Storm
207085 4.6 警告 ヒューレット・パッカード - HP LoadRunner コントローラにおける権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2015-5426 2015-09-17 15:42 2015-09-1 Show GitHub Exploit DB Packet Storm
207086 9.3 危険 ASUSTeK Computer Inc. - ASUS TM-AC1900 ルータにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-6949 2015-09-17 15:41 2015-09-2 Show GitHub Exploit DB Packet Storm
207087 6.8 警告 コーレル株式会社 - Corel WordPerfect の Microsoft Word ドキュメント変換機能におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-6948 2015-09-17 15:40 2015-09-2 Show GitHub Exploit DB Packet Storm
207088 9.3 危険 Borland Software Corporation - Borland AccuRev の Reprise License Manager サービスの activate_doit 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-6947 2015-09-17 15:39 2015-09-2 Show GitHub Exploit DB Packet Storm
207089 9.3 危険 Borland Software Corporation - Borland AccuRev の Reprise License Manager サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-6946 2015-09-17 15:39 2015-09-2 Show GitHub Exploit DB Packet Storm
207090 7.8 危険 Indian Bend Solutions - WordPress 用 IBS Mappro プラグインの lib/download.php における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-5472 2015-09-17 14:53 2015-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
471 8.2 HIGH
Network
- - Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not r… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42260 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
472 7.3 HIGH
Network
- - D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection. New CWE-77
Command Injection
CVE-2026-36983 2026-05-13 00:16 2026-05-12 Show GitHub Exploit DB Packet Storm
473 - - - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel … New CWE-89
SQL Injection
CVE-2026-32687 2026-05-13 00:16 2026-05-13 Show GitHub Exploit DB Packet Storm
474 6.8 MEDIUM
Network
- - Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_expor… New CWE-22
Path Traversal
CVE-2026-43901 2026-05-13 00:15 2026-05-12 Show GitHub Exploit DB Packet Storm
475 4.3 MEDIUM
Network
- - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/filesystem/pathexists endpoint uses String.startsWith() to validate that a resolved file path is within a … New CWE-22
Path Traversal
CVE-2026-42885 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
476 - - - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without suf… New CWE-22
Path Traversal
CVE-2026-42888 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
477 6.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail(), which s… New CWE-79
Cross-site Scripting
CVE-2026-43876 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
478 5.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metad… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-43879 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
479 4.3 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, the unauthenticated plugin/Scheduler/downloadICS.php endpoint passes attacker-controlled title, description, and jo… New CWE-93
CRLF Injection
CVE-2026-43882 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
480 - - - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read APISecret from objects/plugins.json.php and use it to call protected API endpoints… New CWE-200
CWE-862
Information Exposure
 Missing Authorization
CVE-2026-43885 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm