Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207111	7.9	危険	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールの admin_messages.php における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-5692	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207112	4.3	警告	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールの PHP スクリプトにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-5691	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207113	8.5	危険	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールにおけるアクセス制限を回避される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2015-5690	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207114	6.8	警告	シマンテック	-	Symantec Ghost Solutions Suite および Symantec Deployment Solution の Ghost Explorer ユーティリティの ghostexp.exe における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2015-5689	2015-09-29 15:05	2015-09-2	Show	GitHub Exploit DB Packet Storm

207115	6.5	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントの PHP スクリプトにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-9229	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207116	4.9	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントの sysplant.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-9228	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207117	4.4	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントにおける権限を取得される脆弱性	CWE-Other その他	CVE-2014-9227	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207118	4.3	警告	Securifi	-	Securifi Almond および Almond-2015 デバイスのファームウェアにおけるクリックジャッキング攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2015-2917	2015-09-29 11:50	2015-09-10	Show	GitHub Exploit DB Packet Storm

207119	6.8	警告	Securifi	-	Securifi Almond および Almond-2015 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-2916	2015-09-29 11:50	2015-09-10	Show	GitHub Exploit DB Packet Storm

207120	7.3	危険	Securifi	-	Securifi Almond および Almond-2015 デバイスのファームウェアにおける Web 管理のアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2015-2915	2015-09-29 11:50	2015-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
611	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are no… New	CWE-79 Cross-site Scripting	CVE-2022-50966	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

612	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are… New	CWE-79 Cross-site Scripting	CVE-2022-50967	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

613	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality ar… New	CWE-79 Cross-site Scripting	CVE-2022-50968	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

614	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functi… New	CWE-79 Cross-site Scripting	CVE-2022-50969	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

615	5.4	MEDIUM Network	-	-	WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can cra… New	CWE-79 Cross-site Scripting	CVE-2022-50970	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

616	8.6	HIGH Network	-	-	Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgra… Update	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-41705	2026-05-12 23:20	2026-05-9	Show	GitHub Exploit DB Packet Storm

617	8.0	HIGH Network	-	-	A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links i… New	CWE-78 OS Command	CVE-2026-4802	2026-05-12 23:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

618	8.2	HIGH Network	-	-	In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access New	CWE-306 Missing Authentication for Critical Function	CVE-2026-44413	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

619	5.0	MEDIUM Network	-	-	OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45000	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

620	7.1	HIGH Network	-	-	OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox p… New	CWE-862 Missing Authorization	CVE-2026-45001	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm