Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207581 5.8 警告 Schneider Electric
ウインドリバー株式会社
- 複数の Schneider Electric SAGE RTU デバイスで使用される Wind River VxWorks における TCP セッションを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2015-3963 2015-08-6 16:40 2015-06-11 Show GitHub Exploit DB Packet Storm
207582 5.4 警告 レッドハット (JGroups)
レッドハット
- JGroups の DiagnosticsHandler における重要な情報 (診断情報) を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4112 2015-08-6 16:34 2013-09-4 Show GitHub Exploit DB Packet Storm
207583 4.3 警告 WordPress.org - WordPress などの製品で使用される Plupload の Ephox の plupload.flash.swf の shim におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3439 2015-08-6 16:25 2015-04-21 Show GitHub Exploit DB Packet Storm
207584 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3438 2015-08-6 16:25 2015-04-21 Show GitHub Exploit DB Packet Storm
207585 1.9 注意 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される PicketBox における管理暗号鍵を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-1921 2015-08-6 16:18 2013-09-4 Show GitHub Exploit DB Packet Storm
207586 7.5 危険 Apache Software Foundation - Apache Solr の XSLT 用 UpdateRequestHandler または XPathEntityProcessor における脆弱性 CWE-noinfo
情報不足
CVE-2012-6612 2015-08-6 16:14 2012-09-27 Show GitHub Exploit DB Packet Storm
207587 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の mozilla::DOMSVGLength::GetTearOff 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-1563 2015-08-6 16:09 2014-09-2 Show GitHub Exploit DB Packet Storm
207588 5 警告 Ruby on Rails project - Ruby on Rails の Action View の actionpack/lib/action_view/lookup_context.rb におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6414 2015-08-6 16:04 2013-12-3 Show GitHub Exploit DB Packet Storm
207589 10 危険 GE Healthcare - GE Healthcare Optima MR360 におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-5308 2015-08-6 14:54 2015-07-10 Show GitHub Exploit DB Packet Storm
207590 10 危険 GE Healthcare - GE Healthcare Centricity Clinical Archive Audit Trail Repository における脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9736 2015-08-6 11:51 2015-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
871 5.3 MEDIUM
Network
- - ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an att… CWE-789
 Memory Allocation with Excessive Size Value
CVE-2026-42241 2026-05-8 05:37 2026-05-8 Show GitHub Exploit DB Packet Storm
872 - - - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid o… CWE-295
Improper Certificate Validation 
CVE-2026-42225 2026-05-8 05:36 2026-05-8 Show GitHub Exploit DB Packet Storm
873 8.1 HIGH
Network
- - Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.… CWE-1004
 Sensitive Cookie Without 'HttpOnly' Flag
CVE-2026-42239 2026-05-8 05:35 2026-05-8 Show GitHub Exploit DB Packet Storm
874 7.6 HIGH
Network
- - manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. F… CWE-266
 Incorrect Privilege Assignment
CVE-2026-43510 2026-05-8 05:32 2026-05-8 Show GitHub Exploit DB Packet Storm
875 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). syzbot reported use-after-free of AF_UNIX soc… CWE-416
 Use After Free
CVE-2026-43016 2026-05-8 05:31 2026-05-2 Show GitHub Exploit DB Packet Storm
876 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the registered clks dur… CWE-416
 Use After Free
CVE-2026-43015 2026-05-8 05:31 2026-05-2 Show GitHub Exploit DB Packet Storm
877 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_register_fixed_rate() need to be rel… NVD-CWE-noinfo
CVE-2026-43014 2026-05-8 05:29 2026-05-2 Show GitHub Exploit DB Packet Storm
878 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debugfs __mlx5_lag_dev_add_mdev() may return 0 (success) even when an error o… CWE-476
 NULL Pointer Dereference
CVE-2026-43013 2026-05-8 05:28 2026-05-2 Show GitHub Exploit DB Packet Storm
879 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of failure If for some internal reason switchdev mode fails, we rollback to legacy … NVD-CWE-noinfo
CVE-2026-43012 2026-05-8 05:28 2026-05-2 Show GitHub Exploit DB Packet Storm
880 9.8 CRITICAL
Network
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and retur… CWE-415
 Double Free
CVE-2026-43011 2026-05-8 05:26 2026-05-2 Show GitHub Exploit DB Packet Storm