Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
207641 7.5 危険 Mozilla Foundation - Mozilla Firefox の XMLHttpRequest::Open の実装における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-4492 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207642 4.3 警告 Mozilla Foundation - Mozilla Firefox の dom/security/nsCSPUtils.cpp の nsCSPHostSrc::permits 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4490 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207643 7.5 危険 Mozilla Foundation - Mozilla Firefox および Firefox OS の nsTArray_Impl クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-4489 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207644 7.5 危険 Mozilla Foundation - Mozilla Firefox および Firefox OS の StyleAnimationValue クラスにおける脆弱性 CWE-Other
その他 		CVE-2015-4488 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207645 7.5 危険 Mozilla Foundation - Mozilla Firefox および Firefox OS の nsTSubstring::ReplacePrep 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-4487 2015-08-19 17:15 2015-08-12 Show GitHub Exploit DB Packet Storm
207646 10 危険 Mozilla Foundation - Mozilla Firefox の libvpx の decrease_ref_count 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2015-4486 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207647 10 危険 Mozilla Foundation - Mozilla Firefox の libvpx の resize_context_buffers 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-4485 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207648 5 警告 Mozilla Foundation - Mozilla Firefox の JavaScript の実装の js::jit::AssemblerX86Shared::lock_addl 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-4484 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207649 4.3 警告 Mozilla Foundation - Mozilla Firefox における混合コンテンツ保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-4483 2015-08-19 17:15 2015-08-11 Show GitHub Exploit DB Packet Storm
207650 4.6 警告 Mozilla Foundation - Mozilla Firefox のアップデータの mar_read.c における権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2015-4482 2015-08-19 16:58 2015-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 8.3 HIGH
Network 		- - Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L() — a raw SQL lite… CWE-89
SQL Injection 		CVE-2026-41422 2026-05-8 00:47 2026-05-8 Show GitHub Exploit DB Packet Storm
1052 5.4 MEDIUM
Network 		- - PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. The HTML writer skips htmlspecialchars escaping when a cell's formatted value differs from the original value. When a c… CWE-79
Cross-site Scripting 		CVE-2026-40296 2026-05-8 00:47 2026-05-7 Show GitHub Exploit DB Packet Storm
1053 9.8 CRITICAL
Network 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell comma… CWE-78
OS Command  		CVE-2026-42076 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
1054 5.2 MEDIUM
Local 		- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all Ja… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-42077 2026-05-8 00:46 2026-05-5 Show GitHub Exploit DB Packet Storm
1055 4.2 MEDIUM
Network 		- - Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DRF API tokens ("wlu_… CWE-613
 Insufficient Session Expiration 		CVE-2026-41519 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
1056 - - - Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial p… CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF)  		CVE-2026-41654 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
1057 4.3 MEDIUM
Network 		- - Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. Th… CWE-203
 Information Exposure Through Discrepancy 		CVE-2026-44263 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
1058 4.3 MEDIUM
Network 		- - Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has… CWE-80
Basic XSS 		CVE-2026-44264 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
1059 7.7 HIGH
Network 		- - Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname() but passes the origina… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41688 2026-05-8 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm
1060 9.6 CRITICAL
Network 		- - Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in th… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-42090 2026-05-8 00:44 2026-05-5 Show GitHub Exploit DB Packet Storm