Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
211841 7.5 危険 Schneider Electric - Schneider Electric ProClima の MDraw30.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-8513 2015-01-6 10:45 2014-12-10 Show GitHub Exploit DB Packet Storm
211842 7.5 危険 Schneider Electric - Schneider Electric ProClima の Atx45.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-8512 2015-01-6 10:45 2014-12-10 Show GitHub Exploit DB Packet Storm
211843 10 危険 Schneider Electric - Schneider Electric ProClima の Atx45.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-8511 2015-01-6 10:44 2014-12-10 Show GitHub Exploit DB Packet Storm
211844 7.2 危険 Cray Inc. - Cray Linux Environment の Cray デバイス上で稼動する apinit における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-0748 2015-01-6 10:19 2014-01-31 Show GitHub Exploit DB Packet Storm
211845 4.3 警告 Eucalyptus Systems - Eucalyptus のクラウドコントローラコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4769 2015-01-5 19:53 2013-07-5 Show GitHub Exploit DB Packet Storm
211846 3.5 注意 Owl Intranet Engine - Owl Intranet Knowledgebase におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4754 2015-01-5 19:44 2013-07-2 Show GitHub Exploit DB Packet Storm
211847 3.5 注意 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4753 2015-01-5 19:36 2013-07-2 Show GitHub Exploit DB Packet Storm
211848 4.9 警告 Linux - Linux Kernel の fs/isofs/rock.c の rock_continue 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-9420 2015-01-5 18:55 2014-12-15 Show GitHub Exploit DB Packet Storm
211849 2.1 注意 Linux - Linux Kernel の arch/x86/kernel/process_64.c の __switch_to 関数における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2014-9419 2015-01-5 18:51 2014-12-11 Show GitHub Exploit DB Packet Storm
211850 3.5 注意 The phpMyAdmin Project - phpMyAdmin の js/sql.js の PMA_unInlineEditRow 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3592 2015-01-5 18:20 2011-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6278 2026-05-7 08:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1132 9.4 CRITICAL
Network
- - Note Mark is an open-source note-taking application. In version 0.19.2, IsPasswordMatch in backend/db/models.go falls back to a hard-coded bcrypt("null") placeholder whenever a user has no stored pas… Update CWE-287
Improper Authentication
CVE-2026-41571 2026-05-7 06:25 2026-05-5 Show GitHub Exploit DB Packet Storm
1133 - - - FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser control… New CWE-472
 External Control of Assumed-Immutable Web Parameter
CVE-2026-32699 2026-05-7 06:25 2026-05-6 Show GitHub Exploit DB Packet Storm
1134 - - - Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cUsers.updateAddress function does not properly validate anti-CSRF tokens for user address management … New CWE-352
 Origin Validation Error
CVE-2026-40174 2026-05-7 06:22 2026-05-7 Show GitHub Exploit DB Packet Storm
1135 - - - Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the cTrash.empty function does not validate anti-CSRF tokens for trash management requests. An attacker ca… New CWE-352
 Origin Validation Error
CVE-2026-40309 2026-05-7 06:22 2026-05-7 Show GitHub Exploit DB Packet Storm
1136 - - - Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the `cTrash.restore` function does not properly validate anti-CSRF tokens for content restoration requests… New CWE-352
 Origin Validation Error
CVE-2026-40325 2026-05-7 06:22 2026-05-7 Show GitHub Exploit DB Packet Storm
1137 - - - Masa CMS is a content management system forked from Mura CMS. In versions 7.5.2 and earlier, the createBundle method in `csettings.cfc` does not properly validate anti-CSRF tokens for site bundle cre… New CWE-352
 Origin Validation Error
CVE-2026-40326 2026-05-7 06:22 2026-05-7 Show GitHub Exploit DB Packet Storm
1138 - - - Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs. The application incorrectly interprets paths beginning with double slashes (//) as internal pa… New CWE-601
Open Redirect
CVE-2026-40332 2026-05-7 06:22 2026-05-7 Show GitHub Exploit DB Packet Storm
1139 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fuse: abort on fatal signal during sync init When sync init is used and the server exits for some reason (error, crash) while pro… Update NVD-CWE-noinfo
CVE-2026-31713 2026-05-7 06:13 2026-05-1 Show GitHub Exploit DB Packet Storm
1140 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fs_rename() syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff… Update CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2026-31714 2026-05-7 06:12 2026-05-1 Show GitHub Exploit DB Packet Storm