Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211381 3.5 注意 MIT Kerberos - MIT Kerberos 5 の plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-5353 2015-06-8 17:26 2014-12-5 Show GitHub Exploit DB Packet Storm
211382 5 警告 MIT Kerberos - MIT Kerberos 5 の lib/rpc/svc_auth_gss.c の svcauth_gss_accept_sec_context 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9423 2015-06-8 17:26 2014-12-30 Show GitHub Exploit DB Packet Storm
211383 6.1 警告 MIT Kerberos - MIT Kerberos 5 の kadmind の kadmin/server/kadm_rpc_svc.c における kadmin/* 認証チェックを回避される脆弱性 CWE-Other
その他 		CVE-2014-9422 2015-06-8 17:26 2014-12-30 Show GitHub Exploit DB Packet Storm
211384 9 危険 MIT Kerberos - MIT Kerberos 5 の lib/rpc/auth_gssapi_misc.c の auth_gssapi_unwrap_data 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-9421 2015-06-8 17:26 2014-12-28 Show GitHub Exploit DB Packet Storm
211385 9 危険 MIT Kerberos - MIT Kerberos 5 の libgssapi_krb5 ライブラリの lib/gssapi/krb5/process_context_token.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-5352 2015-06-8 17:26 2014-11-6 Show GitHub Exploit DB Packet Storm
211386 4.6 警告 Linux - Linux Kernel の virt/kvm/iommu.c 内の kvm_iommu_map_pages 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-8369 2015-06-8 17:20 2014-10-24 Show GitHub Exploit DB Packet Storm
211387 5 警告 Apache Software Foundation - Windows 上で稼動する Apache HTTP Server の WinNT MPM の server/mpm/winnt/child.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3523 2015-06-8 17:18 2014-07-15 Show GitHub Exploit DB Packet Storm
211388 7.5 危険 Smarty - Smarty におけるセキュアモードの制限を回避される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-8350 2015-06-8 17:16 2014-10-18 Show GitHub Exploit DB Packet Storm
211389 4.9 警告 Linux - Linux Kernel の ALSA 制御の実装の sound/core/control.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2014-4656 2015-06-8 17:09 2014-06-26 Show GitHub Exploit DB Packet Storm
211390 6.2 警告 Linux - Linux Kernel の fs/namei.c 内の mountpoint_last 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-59
リンク解釈の問題 		CVE-2014-5045 2015-06-8 17:09 2014-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2471 6.1 MEDIUM
Network 		- - fast-xml-builder builds XML from JSON. Prior to 1.1.7, when an input data has quotes in attribute values but process entities is not enabled, it breaks the attribute value into multiple attributes. T… CWE-91
Blind XPath Injection 		CVE-2026-44665 2026-05-19 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2472 7.5 HIGH
Network 		- - Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-f… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-44302 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2473 - - - efw4.X is an Enterprise Framework for Web. Prior to 4.08.010, efw.file.FileManager.unZip writes zip entries to disk using new File(baseDir, zipEntry.getName()) with no canonical-path check. An entry … CWE-77
Command Injection 		CVE-2026-44257 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2474 - - - DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.3.0, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.3.0. CWE-791
 Incomplete Filtering of Special Elements 		CVE-2026-44232 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2475 8.6 HIGH
Network 		vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, a sandbox escape vulnerability in vm2 v3.10.5 allows any sandboxed code to crash the host Node.js process via a single Promise construct… CWE-248
 Uncaught Exception 		CVE-2026-44001 2026-05-19 01:16 2026-05-14 Show GitHub Exploit DB Packet Storm
2476 7.5 HIGH
Network 		- - Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose Sec-WebSocket-Protoc… CWE-20
CWE-248
CWE-400
 Improper Input Validation 
 Uncaught Exception
 Uncontrolled Resource Consumption 		CVE-2026-42544 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2477 10.0 CRITICAL
Network 		- - ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026-39337 is incomplete. The pre-authentication remote code execution vulnerability in ChurchCRM's setup wizard … CWE-94
Code Injection 		CVE-2026-42288 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2478 - - - Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a map node with a malici… CWE-79
Cross-site Scripting 		CVE-2026-42157 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2479 5.0 MEDIUM
Network 		- - mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41195 2026-05-19 01:16 2026-05-13 Show GitHub Exploit DB Packet Storm
2480 7.5 HIGH
Network 		- - An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and /modules/upsshipping/lib/UPSBas… CWE-200
Information Exposure 		CVE-2026-39079 2026-05-19 01:16 2026-05-19 Show GitHub Exploit DB Packet Storm