Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
213111	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5809	2015-03-17 17:28	2013-10-15	Show	GitHub Exploit DB Packet Storm

213112	5	警告	アップル日立 IBM オラクル	-	Oracle Java SE および JavaFX における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5848	2015-03-17 17:28	2013-10-15	Show	GitHub Exploit DB Packet Storm

213113	6.4	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5812	2015-03-17 17:27	2013-10-15	Show	GitHub Exploit DB Packet Storm

213114	4.3	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における AWT に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5849	2015-03-17 17:27	2013-10-15	Show	GitHub Exploit DB Packet Storm

213115	9.3	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5832	2015-03-17 17:26	2013-10-15	Show	GitHub Exploit DB Packet Storm

213116	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における CORBA に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5814	2015-03-17 17:25	2013-10-15	Show	GitHub Exploit DB Packet Storm

213117	9.3	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5850	2015-03-17 17:25	2013-10-15	Show	GitHub Exploit DB Packet Storm

213118	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における JNDI に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5817	2015-03-17 17:24	2013-10-15	Show	GitHub Exploit DB Packet Storm

213119	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5818	2015-03-17 17:24	2013-10-15	Show	GitHub Exploit DB Packet Storm

213120	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5840	2015-03-17 17:23	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2551	9.8	CRITICAL Network	-	-	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFil…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-47323	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2552	8.8	HIGH Network	apache	ofbiz	Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz. This issue affects Ap…	CWE-94 CWE-95 Code Injection Eval Injection	CVE-2026-46586	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2553	9.8	CRITICAL Network	apache	ofbiz	Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgr…	CWE-287 Improper Authentication	CVE-2026-45434	2026-05-21 02:16	2026-05-19	Show	GitHub Exploit DB Packet Storm

2554	7.8	HIGH Local	tabby	tabby	Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, since Tabby does not escape control characters from file paths when dragging and dropping a file into it, code …	CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences	CVE-2026-45038	2026-05-21 02:16	2026-05-16	Show	GitHub Exploit DB Packet Storm

2555	7.0	HIGH Local	tabby	tabby	Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.233, Tabby before 1.0.233 automatically confirms ZMODEM protocol detection on all terminal session output without us…	CWE-78 OS Command	CVE-2026-45036	2026-05-21 02:16	2026-05-16	Show	GitHub Exploit DB Packet Storm

2556	4.3	MEDIUM Network	-	-	In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.	CWE-696 Incorrect Behavior Order	CVE-2026-44919	2026-05-21 02:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

2557	8.8	HIGH Network	-	-	In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate inherited ACE SID length smb_inherit_dacl() walks the parent directory DACL loaded from the security descriptor x…	-	CVE-2026-43490	2026-05-21 02:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

2558	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_reply() genlmsg_reply() hands the reply skb to netlink, and netlink_unicast() con…	-	CVE-2026-43481	2026-05-21 02:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

2559	7.8	HIGH Local	-	-	In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() sizeof(num) evaluates to sizeof(size_t) (8 bytes on 64-bit) in…	-	CVE-2026-43476	2026-05-21 02:16	2026-05-14	Show	GitHub Exploit DB Packet Storm

2560	5.5	MEDIUM Local	-	-	Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to …	CWE-290 CWE-451 Authentication Bypass by Spoofing User Interface (UI) Misrepresentation of Critical Information	CVE-2026-39309	2026-05-21 02:16	2026-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed