Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210071 4.3 警告 Ruby on Rails project - Ruby on Rails の implicit-render の実装におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-0130 2015-08-10 11:33 2014-05-6 Show GitHub Exploit DB Packet Storm
210072 4.3 警告 FFmpeg - FFmpeg の libavcodec/g2meet.c の kempf_decode_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-4264 2015-08-10 11:31 2013-08-7 Show GitHub Exploit DB Packet Storm
210073 6.8 警告 IBM
オラクル		 - Oracle Fusion Middleware の Oracle Outside In Technology における Outside In Maintenance に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5879 2015-08-10 11:13 2014-01-14 Show GitHub Exploit DB Packet Storm
210074 4 警告 オラクル - Oracle MySQL の MySQL Server における Optimizer に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3839 2015-08-10 11:09 2013-10-15 Show GitHub Exploit DB Packet Storm
210075 9.3 危険 レッドハット
日立
オラクル		 - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5889 2015-08-10 11:04 2014-01-14 Show GitHub Exploit DB Packet Storm
210076 5 警告 レッドハット
日立
オラクル		 - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5887 2015-08-10 11:03 2014-01-14 Show GitHub Exploit DB Packet Storm
210077 5 警告 レッドハット
日立
オラクル		 - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5899 2015-08-10 11:03 2014-01-14 Show GitHub Exploit DB Packet Storm
210078 4 警告 レッドハット
日立
オラクル		 - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5898 2015-08-10 11:02 2014-01-14 Show GitHub Exploit DB Packet Storm
210079 6.8 警告 オラクル - Oracle Java SE における Deployment に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5904 2015-08-10 10:59 2014-01-14 Show GitHub Exploit DB Packet Storm
210080 5.1 警告 オラクル - Oracle Java SE における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5905 2015-08-10 10:58 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2101 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-269
 Improper Privilege Management 		CVE-2026-8955 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2102 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-269
 Improper Privilege Management 		CVE-2026-8952 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2103 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-8342 2026-05-21 02:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2104 7.1 HIGH
Network 		- - A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID Connect (OIDC) clie… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7571 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2105 7.5 HIGH
Network 		- - A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim i… CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-7507 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2106 8.1 HIGH
Network 		- - A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentiall… CWE-601
Open Redirect 		CVE-2026-7504 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2107 7.5 HIGH
Network 		- - A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high … CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-7307 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2108 6.8 MEDIUM
Network 		- - A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. By knowing or obtai… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-4630 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2109 9.8 CRITICAL
Network 		- - Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFil… CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-47323 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
2110 8.8 HIGH
Network 		apache ofbiz Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. This issue affects Ap… CWE-94
CWE-95
Code Injection
Eval Injection 		CVE-2026-46586 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm