Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208151 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-5131 2015-08-17 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
208152 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-5130 2015-08-17 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
208153 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-5129 2015-08-17 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
208154 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-5127 2015-08-17 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
208155 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-5125 2015-08-17 11:51 2015-08-11 Show GitHub Exploit DB Packet Storm
208156 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-3107 2015-08-17 11:46 2015-06-9 Show GitHub Exploit DB Packet Storm
208157 5 警告 Xceedium, Inc. - Xceedium Xsuite の opm/read_sessionlog.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-4666 2015-08-14 14:39 2015-07-22 Show GitHub Exploit DB Packet Storm
208158 4.3 警告 Xceedium, Inc. - Xceedium Xsuite の ajax_cmd.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4665 2015-08-14 14:39 2015-07-22 Show GitHub Exploit DB Packet Storm
208159 9 危険 Belkin International - Belkin N300 Dual-Band Wi-Fi Range Extender のファームウェアにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-5536 2015-08-14 14:38 2015-05-6 Show GitHub Exploit DB Packet Storm
208160 7.5 危険 BitTorrent, Inc. - BitTorrent DHT bootstrap サーバの lazy_bdecode 関数における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5685 2015-08-14 13:59 2015-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1551 6.4 MEDIUM
Network 		- - Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style… CWE-79
Cross-site Scripting 		CVE-2026-41591 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1552 10.0 CRITICAL
Network 		- - openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth… CWE-287
Improper Authentication 		CVE-2026-41070 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1553 6.3 MEDIUM
Network 		- - In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), da… CWE-282
 Improper Ownership Management 		CVE-2026-40214 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1554 7.4 HIGH
Network 		- - OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless… CWE-863
 Incorrect Authorization 		CVE-2026-40213 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1555 8.6 HIGH
Network 		- - Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows un… CWE-200
CWE-497
Information Exposure
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-42047 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
1556 7.3 HIGH
Network 		- - This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Due to t… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2026-6411 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
1557 8.8 HIGH
Network 		- - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution envir… CWE-78
CWE-94
CWE-250
CWE-284
CWE-693
OS Command 
Code Injection
 Execution with Unnecessary Privileges
Improper Access Control
 Protection Mechanism Failure 		CVE-2026-41900 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
1558 8.7 HIGH
Network 		- - zrok is software for sharing web services, files, and network resources. Prior to version 2.0.2, the zrok WebDAV drive backend (davServer.Dir) restricts path traversal through lexical normalization b… CWE-22
CWE-61
Path Traversal
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-42275 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
1559 6.1 MEDIUM
Network 		- - In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS. This vulnerability can be exploited by unauthenticated remote attackers to target users of the mo… CWE-79
Cross-site Scripting 		CVE-2022-23961 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
1560 - - - yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET). - CVE-2024-46508 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm