Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
210901 4.3 警告 ジュニパーネットワークス - Juniper SRX シリーズのデバイス上で稼働する Juniper Junos の Dynamic VPN におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-3005 2015-04-15 11:41 2015-04-8 Show GitHub Exploit DB Packet Storm
210902 4.3 警告 ジュニパーネットワークス - Juniper Junos の J-Web におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-3004 2015-04-15 11:40 2015-04-8 Show GitHub Exploit DB Packet Storm
210903 5 警告 Quassel IRC - Quassel のメッセージ分割機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-2779 2015-04-15 11:40 2015-02-21 Show GitHub Exploit DB Packet Storm
210904 4.3 警告 Joel Martin - noVNC における Cookie をキャプチャされる脆弱性 CWE-310
暗号の問題 		CVE-2013-7436 2015-04-15 11:39 2013-10-28 Show GitHub Exploit DB Packet Storm
210905 5 警告 アップル - Apple Xcode で使用される LLVM の Clang におけるスタック保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-3027 2015-04-15 11:28 2015-04-8 Show GitHub Exploit DB Packet Storm
210906 4.4 警告 アップル - Apple iOS の Telephony コンポーネントにおけるサンドボックス保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2015-1115 2015-04-15 11:17 2015-04-8 Show GitHub Exploit DB Packet Storm
210907 6.8 警告 Google - Google Chrome の gpu/command_buffer/service/gles2_cmd_decoder.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2015-1234 2015-04-14 18:30 2015-04-1 Show GitHub Exploit DB Packet Storm
210908 7.5 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-1233 2015-04-14 18:30 2015-04-1 Show GitHub Exploit DB Packet Storm
210909 7.2 危険 ジュニパーネットワークス - Juniper Junos における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-3003 2015-04-14 17:54 2015-04-8 Show GitHub Exploit DB Packet Storm
210910 6.9 警告 ジュニパーネットワークス - SRX シリーズデバイス上で稼動する Juniper Junos におけるコンソールポートに再接続される脆弱性 CWE-Other
その他 		CVE-2015-3002 2015-04-14 17:51 2015-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 - - - The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW… New - CVE-2026-31218 2026-05-14 00:45 2026-05-13 Show GitHub Exploit DB Packet Storm
982 - - - The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable to insecure deserialization (CW… New - CVE-2026-31219 2026-05-14 00:45 2026-05-13 Show GitHub Exploit DB Packet Storm
983 - - - PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged… New - CVE-2026-31220 2026-05-14 00:45 2026-05-13 Show GitHub Exploit DB Packet Storm
984 8.8 HIGH
Network 		snorkel snorkel The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability (CWE-502) in the MultitaskClassifier.load() method of the MultitaskClassifier class. The method loads model weight … New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-31224 2026-05-14 00:44 2026-05-13 Show GitHub Exploit DB Packet Storm
985 - - - The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process. When loading model f… New - CVE-2026-31232 2026-05-14 00:44 2026-05-13 Show GitHub Exploit DB Packet Storm
986 7.1 HIGH
Network 		- - The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks. New CWE-352
 Origin Validation Error 		CVE-2026-45430 2026-05-14 00:43 2026-05-12 Show GitHub Exploit DB Packet Storm
987 5.4 MEDIUM
Network 		- - A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containin… New CWE-79
Cross-site Scripting 		CVE-2025-70842 2026-05-14 00:43 2026-05-13 Show GitHub Exploit DB Packet Storm
988 7.7 HIGH
Network 		- - Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.1, an authenticated Server-Side Request Forgery (SSRF) vulnerabi… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42141 2026-05-14 00:43 2026-05-13 Show GitHub Exploit DB Packet Storm
989 5.3 MEDIUM
Network 		- - Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.21 and 6.15.0, responses from the forgot password forms hinted at whether an account existed for a given email add… New CWE-204
 Response Discrepancy Information Exposure 		CVE-2026-44306 2026-05-14 00:43 2026-05-13 Show GitHub Exploit DB Packet Storm
990 8.7 HIGH
Network 		- - Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden does not enforce that a groups_users.users_organizations_uuid entry belongs to the same organization as grou… New CWE-285
Improper Authorization 		CVE-2026-43912 2026-05-14 00:40 2026-05-12 Show GitHub Exploit DB Packet Storm