Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
212661 10 危険 マイクロソフト - 複数の Microsoft Windows 製品の Telnet サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-0014 2015-01-15 16:06 2015-01-13 Show GitHub Exploit DB Packet Storm
212662 4.7 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの mrxdav.sys における偽装保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0011 2015-01-15 16:05 2015-01-13 Show GitHub Exploit DB Packet Storm
212663 6.1 警告 マイクロソフト - 複数の Microsoft Windows 製品の Network Location Awareness サービスにおける意図しない許容設定を誘発される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0006 2015-01-15 16:04 2015-01-13 Show GitHub Exploit DB Packet Storm
212664 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の User Profile Service における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0004 2015-01-15 16:03 2015-01-13 Show GitHub Exploit DB Packet Storm
212665 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の Application Compatibility コンポーネントにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0002 2015-01-15 16:02 2015-01-13 Show GitHub Exploit DB Packet Storm
212666 1.9 注意 マイクロソフト - 複数の Microsoft Windows 製品の Windows Error Reporting コンポーネントにおける Protected Process Light 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-0001 2015-01-15 16:02 2015-01-13 Show GitHub Exploit DB Packet Storm
212667 7.5 危険 Yourmembers - WordPress 用 Code Futures YourMembers プラグインの includes/ym-download_functions.include.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-100003 2015-01-15 15:58 2014-10-14 Show GitHub Exploit DB Packet Storm
212668 6.8 警告 MKT Lines - WordPress 用 SEO Plugin LiveOptim プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-100001 2015-01-15 15:57 2014-04-15 Show GitHub Exploit DB Packet Storm
212669 7.5 危険 Dev4Press - WordPress 用 GD Star Rating プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2839 2015-01-15 15:57 2014-03-28 Show GitHub Exploit DB Packet Storm
212670 6.8 警告 Dev4Press - WordPress 用 GD Star Rating プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2838 2015-01-15 15:57 2014-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1451 8.8 HIGH
Network
anthropic claude_code In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents. An attacker could craft a malicious reposi… Update CWE-20
CWE-77
NVD-CWE-noinfo
 Improper Input Validation 
Command Injection
CVE-2026-40068 2026-05-13 01:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1452 6.5 MEDIUM
Network
langgenius dify Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users within the same tenant by supplyin… Update CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-41950 2026-05-13 01:20 2026-05-6 Show GitHub Exploit DB Packet Storm
1453 7.5 HIGH
Network
openmrs openmrs OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid}` endpoint is vulnera… Update CWE-22
Path Traversal
CVE-2026-40075 2026-05-13 01:18 2026-05-6 Show GitHub Exploit DB Packet Storm
1454 6.5 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged user (EX: Content Editor with only pages.update permissions) can bypass the existing Twig sandbox restrictions by utilizing … Update CWE-863
 Incorrect Authorization
CVE-2026-42610 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1455 8.9 HIGH
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to create a page) user can cause XSS with the injection of svg element. The XSS can further be escalated t… Update CWE-79
Cross-site Scripting
CVE-2026-42611 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1456 5.4 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level accounts to execute arbitrary JavaScript. The issue … Update CWE-79
Cross-site Scripting
CVE-2026-42612 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1457 4.8 MEDIUM
Network
getgrav grav Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with page editing permissions can inject an executable JavaScript event-handler attribute into rendered image HTML thro… Update CWE-79
Cross-site Scripting
CVE-2026-42841 2026-05-13 01:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1458 6.5 MEDIUM
Local
linuxcontainers lxc lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network … Update CWE-863
 Incorrect Authorization
CVE-2026-39402 2026-05-13 01:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1459 5.3 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, the Documents and Images API incorrectly listed items in private collections. A user with access t… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44201 2026-05-13 00:59 2026-05-12 Show GitHub Exploit DB Packet Storm
1460 6.5 MEDIUM
Network
torchbox wagtail Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revis… Update CWE-280
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-44197 2026-05-13 00:58 2026-05-12 Show GitHub Exploit DB Packet Storm