Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
212921 7.2 危険 Canonical - Ubuntu で使用される mountall におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1421 2014-11-27 13:49 2014-11-18 Show GitHub Exploit DB Packet Storm
212922 4.7 警告 Linux - Linux Kernel の fs/udf/inode.c の __udf_read_inode 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-6410 2014-11-26 18:04 2014-09-4 Show GitHub Exploit DB Packet Storm
212923 2.3 注意 Linux - Linux kernel の drivers/target/target_core_rd.c 内の rd_build_device_space 関数における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4027 2014-11-26 18:02 2014-01-19 Show GitHub Exploit DB Packet Storm
212924 7.2 危険 Fabrice Bellard - QEMU の hw/ide/core.c における脆弱性 CWE-189
数値処理の問題
CVE-2014-2894 2014-11-26 17:54 2014-04-17 Show GitHub Exploit DB Packet Storm
212925 7.5 危険 SiliSoftware
ownCloud
- ownCloud Server で使用される getID3() における任意のファイルを読まれる脆弱性 CWE-Other
その他
CVE-2014-2053 2014-11-26 17:51 2014-03-7 Show GitHub Exploit DB Packet Storm
212926 7.5 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1575 2014-11-26 17:39 2014-10-14 Show GitHub Exploit DB Packet Storm
212927 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-6352 2014-11-26 17:26 2014-10-21 Show GitHub Exploit DB Packet Storm
212928 5 警告 Drupal
Peter Wolanin
- Drupal のパスワードハッシュ API および Drupal 用 Secure Password Hashes モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-9016 2014-11-26 16:25 2014-11-19 Show GitHub Exploit DB Packet Storm
212929 6.8 警告 Drupal - Drupal におけるセッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9015 2014-11-26 16:24 2014-11-19 Show GitHub Exploit DB Packet Storm
212930 9 危険 Digium - Asterisk Open Source および Certified Asterisk の DB ダイヤルプラン機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8418 2014-11-26 15:59 2014-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… Update - CVE-2026-31693 2026-05-3 16:16 2026-04-30 Show GitHub Exploit DB Packet Storm
302 6.5 MEDIUM
Network
- - A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the comp… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7681 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
303 4.3 MEDIUM
Network
- - A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipu… New CWE-22
Path Traversal
CVE-2026-7680 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
304 7.2 HIGH
Network
- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function in versions up to,… New CWE-79
Cross-site Scripting
CVE-2026-5063 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
305 7.3 HIGH
Network
- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… New CWE-287
Improper Authentication
CVE-2026-7679 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
306 6.3 MEDIUM
Network
- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7678 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
307 3.5 LOW
Network
- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7677 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
308 4.3 MEDIUM
Network
- - A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/control… New CWE-22
Path Traversal
CVE-2026-7676 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
309 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6481 2026-05-3 08:16 2026-05-3 Show GitHub Exploit DB Packet Storm
310 7.3 HIGH
Network
- - A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulatio… New CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read
CVE-2026-7668 2026-05-3 06:16 2026-05-3 Show GitHub Exploit DB Packet Storm