Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207591 4.3 警告 Splunk - Splunk Enterprise および Splunk Light の Dashboard におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6514 2015-08-24 14:40 2015-07-7 Show GitHub Exploit DB Packet Storm
207592 7.5 危険 J2Store - Joomla! 用 J2Store エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-6513 2015-08-24 14:10 2015-07-7 Show GitHub Exploit DB Packet Storm
207593 5 警告 Codologic.com - FreiChat の server/plugins/chatroom/chatroom.php の get_messages 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-6512 2015-08-24 14:03 2015-07-13 Show GitHub Exploit DB Packet Storm
207594 7.5 危険 Powerplay Gallery project - WordPress 用 Powerplay Gallery プラグインの upload.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-5681 2015-08-24 13:55 2015-06-27 Show GitHub Exploit DB Packet Storm
207595 7.5 危険 Powerplay Gallery project - WordPress 用 Powerplay Gallery プラグインの upload.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-5599 2015-08-24 13:55 2015-06-27 Show GitHub Exploit DB Packet Storm
207596 4.3 警告 Modern Tribe Inc. - WordPress 用 Modern Tribe Eventbrite Tickets プラグインの Event Import ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-5485 2015-08-24 13:55 2015-07-9 Show GitHub Exploit DB Packet Storm
207597 10 危険 Dedicated Micros - Dedicated Micros のデジタルビデオレコーダが、平文で通信し、パスワード認証をしていない問題 CWE-Other
その他 		CVE-2015-2909 2015-08-24 13:53 2015-08-20 Show GitHub Exploit DB Packet Storm
207598 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6511 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
207599 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6510 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
207600 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-6509 2015-08-24 11:40 2015-06-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 9.6 CRITICAL
Network 		argoproj argo_cd Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo… Update CWE-200
CWE-212
Information Exposure
 Improper Removal of Sensitive Information Before Storage or Transfer 		CVE-2026-42880 2026-05-12 02:46 2026-05-8 Show GitHub Exploit DB Packet Storm
1142 8.8 HIGH
Network 		gitpython_project gitpython GitPython is a python library used to interact with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by … Update CWE-78
OS Command  		CVE-2026-42215 2026-05-12 02:45 2026-05-8 Show GitHub Exploit DB Packet Storm
1143 7.8 HIGH
Local 		gitpython_project gitpython GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitP… Update CWE-94
Code Injection 		CVE-2026-44244 2026-05-12 02:44 2026-05-8 Show GitHub Exploit DB Packet Storm
1144 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the IPv6 s… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-43099 2026-05-12 02:36 2026-05-6 Show GitHub Exploit DB Packet Storm
1145 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against NULL vlan group When CONFIG_BRIDGE_VLAN_FILTERING is not set, br_vlan_group() and … Update CWE-476
 NULL Pointer Dereference 		CVE-2026-43100 2026-05-12 02:35 2026-05-6 Show GitHub Exploit DB Packet Storm
1146 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() for possible NULL value… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-43101 2026-05-12 02:35 2026-05-6 Show GitHub Exploit DB Packet Storm
1147 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airoha_qdma_rx_process() If an error occurs on the subsequents buffers belonging to the non-linea… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43102 2026-05-12 02:34 2026-05-6 Show GitHub Exploit DB Packet Storm
1148 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: lapbether: handle NETDEV_PRE_TYPE_CHANGE lapbeth_data_transmit() expects the underlying device type to be ARPHRD_ETHER. Ret… Update NVD-CWE-noinfo
CVE-2026-43103 2026-05-12 02:33 2026-05-6 Show GitHub Exploit DB Packet Storm
1149 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix a memory leak in hang state error path When vc4_save_hang_state() encounters an early return condition, it returns w… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43104 2026-05-12 02:32 2026-05-6 Show GitHub Exploit DB Packet Storm
1150 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix memory leak of BO array in hang state The hang state's BO array is allocated separately with kzalloc() in vc4_save_h… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-43105 2026-05-12 02:32 2026-05-6 Show GitHub Exploit DB Packet Storm