Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209531 5.8 警告 Schneider Electric
ウインドリバー株式会社
- 複数の Schneider Electric SAGE RTU デバイスで使用される Wind River VxWorks における TCP セッションを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2015-3963 2015-08-6 16:40 2015-06-11 Show GitHub Exploit DB Packet Storm
209532 5.4 警告 レッドハット (JGroups)
レッドハット
- JGroups の DiagnosticsHandler における重要な情報 (診断情報) を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4112 2015-08-6 16:34 2013-09-4 Show GitHub Exploit DB Packet Storm
209533 4.3 警告 WordPress.org - WordPress などの製品で使用される Plupload の Ephox の plupload.flash.swf の shim におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3439 2015-08-6 16:25 2015-04-21 Show GitHub Exploit DB Packet Storm
209534 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3438 2015-08-6 16:25 2015-04-21 Show GitHub Exploit DB Packet Storm
209535 1.9 注意 レッドハット - Red Hat JBoss Enterprise Application Platform で使用される PicketBox における管理暗号鍵を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-1921 2015-08-6 16:18 2013-09-4 Show GitHub Exploit DB Packet Storm
209536 7.5 危険 Apache Software Foundation - Apache Solr の XSLT 用 UpdateRequestHandler または XPathEntityProcessor における脆弱性 CWE-noinfo
情報不足
CVE-2012-6612 2015-08-6 16:14 2012-09-27 Show GitHub Exploit DB Packet Storm
209537 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の mozilla::DOMSVGLength::GetTearOff 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-1563 2015-08-6 16:09 2014-09-2 Show GitHub Exploit DB Packet Storm
209538 5 警告 Ruby on Rails project - Ruby on Rails の Action View の actionpack/lib/action_view/lookup_context.rb におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6414 2015-08-6 16:04 2013-12-3 Show GitHub Exploit DB Packet Storm
209539 10 危険 GE Healthcare - GE Healthcare Optima MR360 におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-5308 2015-08-6 14:54 2015-07-10 Show GitHub Exploit DB Packet Storm
209540 10 危険 GE Healthcare - GE Healthcare Centricity Clinical Archive Audit Trail Repository における脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-9736 2015-08-6 11:51 2015-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1921 8.1 HIGH
Network
- - efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the readonly flag set on the <efw:elFinder> JSP tag is intended to prevent file modifications. When protected=true, elfinder_checkRisk en… CWE-863
 Incorrect Authorization
CVE-2026-44260 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1922 4.6 MEDIUM
Network
- - efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, the previewServlet serves files with their detected MIME type based on file extension, without any content sanitization or security heade… CWE-80
Basic XSS
CVE-2026-44259 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1923 3.7 LOW
Network
- - Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Prior to 4.10.22, the bundleCache is keyed by (Locale, baseName) where th… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44242 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1924 7.5 HIGH
Network
- - Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. From 4.3.0 to before 4.10.22, TimeConverterRegistrar caches DateTimeForma… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44241 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1925 6.3 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exp… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-44113 2026-05-14 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1926 - - - Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, Craft CMS which contains an input-handling flaw in a Yii object creation path that let any authenticated user … CWE-479
CVE-2026-44011 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1927 - - - Craft CMS is a content management system (CMS). From 4.0.0 to before 4.17.12 and 5.9.18, the GraphQL Address element resolver (src/gql/resolvers/elements/Address.php) performs no schema scope filteri… CWE-862
 Missing Authorization
CVE-2026-44010 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1928 9.9 CRITICAL
Network
- - wger is a free, open-source workout and fitness manager. Prior to 2.6, the reset_user_password and gym_permissions_user_edit views in wger perform a gym-scope authorization check using Python object … CWE-863
 Incorrect Authorization
CVE-2026-43948 2026-05-14 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1929 6.8 MEDIUM
Network
bx33661 wireshark_mcp Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities. In 1.1.5 and earlier, wireshark-mcp exposes a wireshark_expor… CWE-22
Path Traversal
CVE-2026-43901 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1930 7.7 HIGH
Network
- - Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.7.0, the subscriptions.create API endpoint in server/routes/api/subscriptions/subscriptions.ts exhibits a broken aut… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-43890 2026-05-14 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm