Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210221 7.5 危険 Steven Ellis - WordPress 用 Easy2Map プラグインの includes/Function.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-4614 2015-07-13 18:45 2015-07-2 Show GitHub Exploit DB Packet Storm
210222 7.5 危険 io.js
Google
Node.js Foundation		 - Node.js などの製品で使用される Google V8 の unicode-decoder.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-5380 2015-07-13 18:05 2015-07-4 Show GitHub Exploit DB Packet Storm
210223 6.8 警告 PivotX - PivotX の fileupload.php における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2015-5458 2015-07-13 17:09 2015-06-21 Show GitHub Exploit DB Packet Storm
210224 7.5 危険 PivotX - PivotX における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5457 2015-07-13 17:09 2015-06-21 Show GitHub Exploit DB Packet Storm
210225 4.3 警告 PivotX - PivotX の modules/formclass.php の form メソッドにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-5456 2015-07-13 17:09 2015-06-21 Show GitHub Exploit DB Packet Storm
210226 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-5118 2015-07-13 17:03 2015-07-8 Show GitHub Exploit DB Packet Storm
210227 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-5117 2015-07-13 17:03 2015-07-8 Show GitHub Exploit DB Packet Storm
210228 5 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2015-5116 2015-07-13 17:03 2015-07-8 Show GitHub Exploit DB Packet Storm
210229 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-4433 2015-07-13 17:03 2015-07-8 Show GitHub Exploit DB Packet Storm
210230 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-4432 2015-07-13 17:03 2015-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1211 4.7 MEDIUM
Network 		- - A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8772 2026-05-18 09:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1212 7.3 HIGH
Network 		- - A security flaw has been discovered in linlinjava litemall up to 1.8.0. This impacts the function list of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/web/WxGoodsController.java … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8771 2026-05-18 09:16 2026-05-18 Show GitHub Exploit DB Packet Storm
1213 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present The DATA-packet handler in rxrpc_input_call_event() and th… CWE-787
 Out-of-bounds Write 		CVE-2026-43500 2026-05-18 01:16 2026-05-11 Show GitHub Exploit DB Packet Storm
1214 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-6050 2026-05-17 08:16 2026-05-17 Show GitHub Exploit DB Packet Storm
1215 4.3 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with Guest … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2025-13874 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1216 5.4 MEDIUM
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to inject … CWE-94
Code Injection 		CVE-2025-12669 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1217 7.5 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause … CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2025-14869 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1218 7.5 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2025-14870 2026-05-16 12:38 2026-05-14 Show GitHub Exploit DB Packet Storm
1219 7.5 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause den… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-1184 2026-05-16 12:37 2026-05-14 Show GitHub Exploit DB Packet Storm
1220 8.1 HIGH
Network 		gitlab gitlab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a read… CWE-840
 Business Logic Errors 		CVE-2026-1322 2026-05-16 12:37 2026-05-14 Show GitHub Exploit DB Packet Storm