Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211571 10 危険 アップル - Apple OS X の IOHIDFamily における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2014-8822 2015-02-12 10:46 2015-01-27 Show GitHub Exploit DB Packet Storm
211572 4.7 警告 アップル - Apple OS X の IOUSBFamily の IOUSB コントローラにおける任意のカーネルメモリ領域を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8823 2015-02-12 10:46 2015-01-27 Show GitHub Exploit DB Packet Storm
211573 10 危険 アップル - Apple OS X のカーネル kernel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-8824 2015-02-12 10:46 2015-01-27 Show GitHub Exploit DB Packet Storm
211574 10 危険 アップル - 複数の Apple 製品のカーネルにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4495 2015-02-12 10:44 2015-01-27 Show GitHub Exploit DB Packet Storm
211575 7.5 危険 アップル - Apple iOS の MobileInstallation の app-installation 機能におけるローカルのアプリケーションコンテナの制御権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4493 2015-02-12 10:44 2015-01-27 Show GitHub Exploit DB Packet Storm
211576 6.8 警告 アップル - Apple iOS の Springboard における初回起動時の制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-4494 2015-02-12 10:44 2015-01-27 Show GitHub Exploit DB Packet Storm
211577 2.1 注意 アップル - Apple OS X の CommerceKit Framework の App Store プロセスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-4499 2015-02-12 10:44 2015-01-27 Show GitHub Exploit DB Packet Storm
211578 10 危険 アップル - Apple OS X の Bluetooth の実装の IOBluetoothFamily における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2014-4497 2015-02-12 10:44 2015-01-27 Show GitHub Exploit DB Packet Storm
211579 6.8 警告 アップル - 複数の Apple 製品の CoreGraphics における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-4481 2015-02-12 10:42 2015-01-27 Show GitHub Exploit DB Packet Storm
211580 6.8 警告 アップル - 複数の Apple 製品の FontParser におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-4483 2015-02-12 10:42 2015-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1251 6.1 MEDIUM
Network 		- - Admidio is an open-source user management solution. Prior to version 5.0.9, an unauthenticated attacker can execute arbitrary JavaScript in any Admidio user's browser through a reflected XSS in syste… CWE-79
Cross-site Scripting 		CVE-2026-41661 2026-05-8 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1252 6.5 MEDIUM
Network 		- - Admidio is an open-source user management solution. Prior to version 5.0.9, the ecard_preview.php endpoint does not validate that the ecard_template POST parameter is a safe filename before passing i… CWE-22
Path Traversal 		CVE-2026-41655 2026-05-8 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1253 6.1 MEDIUM
Network 		- - fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the "-->" sequence in comment content or the … CWE-91
Blind XPath Injection 		CVE-2026-41650 2026-05-8 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1254 4.7 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop A race condition between gether_disconnect() and eth_stop()… CWE-362
Race Condition 		CVE-2026-31728 2026-05-8 01:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1255 - - - Incus is a system container and virtual machine manager. Prior to version 7.0.0, user provided image and backup tarballs would be unpacked and YAML files parsed without any size restrictions. This wa… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-41648 2026-05-8 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1256 9.6 CRITICAL
Network 		- - Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A ma… CWE-22
Path Traversal 		CVE-2026-41589 2026-05-8 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1257 - - - Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and … CWE-502
 Deserialization of Untrusted Data 		CVE-2026-41586 2026-05-8 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1258 5.3 MEDIUM
Network 		openclaw openclaw OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks. Attackers can bypass … CWE-862
 Missing Authorization 		CVE-2026-43572 2026-05-8 01:03 2026-05-5 Show GitHub Exploit DB Packet Storm
1259 8.8 HIGH
Network 		openclaw openclaw OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins. Attackers can expl… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-43571 2026-05-8 01:03 2026-05-5 Show GitHub Exploit DB Packet Storm
1260 6.5 MEDIUM
Network 		openclaw openclaw OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape the expected repository root. Atta… CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-43570 2026-05-8 01:03 2026-05-5 Show GitHub Exploit DB Packet Storm