Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209261 6.8 警告 XZERES Wind Corp - XZERES 442SR Wind Turbines 上で稼働する XZERES 442SR OS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-3950 2015-06-8 11:25 2015-06-4 Show GitHub Exploit DB Packet Storm
209262 4.3 警告 シスコシステムズ - FireSIGHT システム ソフトウェアの Management Center コンポーネントの管理 Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0766 2015-06-5 17:19 2015-06-3 Show GitHub Exploit DB Packet Storm
209263 5 警告 シスコシステムズ - Cisco ONS 15454 システムソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-0765 2015-06-5 17:19 2015-06-3 Show GitHub Exploit DB Packet Storm
209264 5 警告 シスコシステムズ - Cisco Unified MeetingPlace における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2015-0764 2015-06-5 17:19 2015-06-3 Show GitHub Exploit DB Packet Storm
209265 5 警告 シスコシステムズ - Cisco Unified MeetingPlace における重要なセッション情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-0763 2015-06-5 17:19 2015-06-2 Show GitHub Exploit DB Packet Storm
209266 4.3 警告 シスコシステムズ - Microsoft Outlook 用 Cisco Unified MeetingPlace の管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0762 2015-06-5 17:19 2015-06-2 Show GitHub Exploit DB Packet Storm
209267 7.2 危険 シスコシステムズ - Linux 上で稼働する Cisco AnyConnect Secure Mobility Client における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0761 2015-06-5 17:19 2015-06-2 Show GitHub Exploit DB Packet Storm
209268 4 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの IKEv1 の実装における XAUTH 認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0760 2015-06-5 17:19 2015-06-2 Show GitHub Exploit DB Packet Storm
209269 6.5 警告 WP Membership - WordPress 用 WP Membership プラグインにおける管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-4038 2015-06-5 17:14 2015-05-22 Show GitHub Exploit DB Packet Storm
209270 7.2 危険 Fabrice Bellard - QEMU における権限を取得される脆弱性 CWE-Other
その他
CVE-2015-4106 2015-06-5 17:10 2015-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 - - - An issue was discovered in the PaperCut Hive Ricoh embedded application. When the "Deep Logging" (diagnostic) mode is enabled, the application inadvertently records administrative credentials in plai… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2026-7824 2026-05-8 00:10 2026-05-5 Show GitHub Exploit DB Packet Storm
1142 - - - A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. When processing SVG marker references, the renderer retrieves a node by its id at… CWE-122
CWE-843
Heap-based Buffer Overflow
Type Confusion
CVE-2026-6210 2026-05-8 00:10 2026-05-6 Show GitHub Exploit DB Packet Storm
1143 7.5 HIGH
Network
- - NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.39, the queryParentSQL() function in the core database package co… CWE-89
SQL Injection
CVE-2026-41640 2026-05-8 00:08 2026-05-7 Show GitHub Exploit DB Packet Storm
1144 - - - Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._red… CWE-601
Open Redirect
CVE-2025-61669 2026-05-8 00:07 2026-05-6 Show GitHub Exploit DB Packet Storm
1145 - - - Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pa… CWE-777
CVE-2026-40110 2026-05-8 00:07 2026-05-6 Show GitHub Exploit DB Packet Storm
1146 - - - In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 an… CWE-79
Cross-site Scripting
CVE-2026-40171 2026-05-8 00:07 2026-05-7 Show GitHub Exploit DB Packet Storm
1147 - - - OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… CWE-22
Path Traversal
CVE-2026-40075 2026-05-8 00:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1148 - - - Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runt… CWE-613
 Insufficient Session Expiration
CVE-2026-40934 2026-05-8 00:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1149 7.5 HIGH
Network
- - GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.3.0, a remote Denial of Service (DoS) vulnerability exists in GoBGP due to a nil poin… CWE-476
 NULL Pointer Dereference
CVE-2026-41642 2026-05-8 00:06 2026-05-7 Show GitHub Exploit DB Packet Storm
1150 7.5 HIGH
Network
- - GoBGP is an open source Border Gateway Protocol (BGP) implementation in the Go Programming Language. In version 4.4.0, an unauthenticated remote BGP peer can trigger a fatal panic in GoBGP by sending… CWE-476
 NULL Pointer Dereference
CVE-2026-42285 2026-05-8 00:06 2026-05-7 Show GitHub Exploit DB Packet Storm