Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
212221 4.3 警告 フォーティネット - Fortinet FortiMail の WebGUI の Web Action Quarantine Release 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8617 2015-03-6 14:26 2014-11-4 Show GitHub Exploit DB Packet Storm
212222 4.3 警告 Magic Hills - WordPress 用 WonderPlugin Audio Player プラグインの wonderpluginaudio.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2218 2015-03-6 14:17 2015-01-21 Show GitHub Exploit DB Packet Storm
212223 7.5 危険 Photocrati Media - WordPress 用 Photocrati テーマの ecomm-sizes.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-2216 2015-03-6 14:16 2015-03-2 Show GitHub Exploit DB Packet Storm
212224 4.3 警告 WP Ninjas, LLC. - WordPress 用 Ninja Forms プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2220 2015-03-6 14:16 2015-02-12 Show GitHub Exploit DB Packet Storm
212225 7.5 危険 WP Ninjas, LLC. - WordPress 用 Ninja Forms プラグインにおける脆弱性 CWE-noinfo
情報不足
CVE-2014-9688 2015-03-6 14:16 2014-12-2 Show GitHub Exploit DB Packet Storm
212226 6.4 警告 Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
VMware
レッドハット
- Apache Tomcat の JULI ロギングコンポーネントにおけるウェブアプリケーションのパーミッションに関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5342 2015-03-5 18:27 2007-12-27 Show GitHub Exploit DB Packet Storm
212227 3.5 注意 Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
サン・マイクロシステムズ
VMware
レッドハット
- Apache Tomcat の WebDAV servlet における情報漏えいの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5461 2015-03-5 18:27 2007-10-15 Show GitHub Exploit DB Packet Storm
212228 4.3 警告 トレンドマイクロ
Apache Software Foundation
アップル
サイバートラスト株式会社
VMware
レッドハット
- Apache Tomcat において不正な Cookie を送信される脆弱性 CWE-200
情報漏えい
CVE-2007-5333 2015-03-5 18:27 2008-02-12 Show GitHub Exploit DB Packet Storm
212229 4.3 警告 アップル
VMware
Apache Software Foundation
ヒューレット・パッカード
- Apache Tomcat における SSL リクエストに関する脆弱性 CWE-DesignError
CVE-2007-6286 2015-03-5 18:26 2008-02-11 Show GitHub Exploit DB Packet Storm
212230 5 警告 Apache Software Foundation - Apache ActiveMQ のデフォルト設定におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-6551 2015-03-5 18:26 2012-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1951 8.5 HIGH
Network
openedx edx-enterprise The Open edx Enterprise Service app provides enterprise features to the Open edX platform. From 7.0.2 to 7.0.4, the sync_provider_data endpoint in SAMLProviderDataViewSet fetches SAML metadata from a… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42860 2026-05-13 23:50 2026-05-12 Show GitHub Exploit DB Packet Storm
1952 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature b… CWE-863
 Incorrect Authorization
CVE-2026-34645 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1953 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature b… CWE-863
 Incorrect Authorization
CVE-2026-34646 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1954 7.4 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-34647 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1955 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34648 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1956 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34649 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1957 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34650 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1958 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application … CWE-400
 Uncontrolled Resource Consumption
CVE-2026-34651 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1959 7.5 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result i… - CVE-2026-34652 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1960 8.7 HIGH
Network
- - Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') … CWE-22
Path Traversal
CVE-2026-34653 2026-05-13 23:49 2026-05-13 Show GitHub Exploit DB Packet Storm