Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213191 5.4 警告 core-apps - Android 用 OHBM 20th Annual Meeting アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6818 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213192 5.4 警告 covechurch - Android 用 Cove アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6817 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213193 5.4 警告 lvtu99 - Android 用 WISDOM アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6816 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213194 5.4 警告 voucherry - Android 用 Vouch! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6815 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213195 5.4 警告 sentinels randomizer project - Android 用 Sentinels Randomizer アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6814 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213196 5.4 警告 klassens project - Android 用 klassens アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6813 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213197 5.4 警告 qmania - Android 用 Aloha Guide アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6812 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213198 5.4 警告 core-apps - Android 用 RIMS 2014 Annual Conference アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6810 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213199 5.4 警告 active 24 project - Android 用 Active 24 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6808 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
213200 5.4 警告 olaschool - Android 用 OLA School アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-6807 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1111 8.6 HIGH
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to… CWE-121
Stack-based Buffer Overflow 		CVE-2026-42469 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
1112 6.1 MEDIUM
Network 		- - Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly sanitize user-suppli… CWE-79
Cross-site Scripting 		CVE-2025-69606 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
1113 6.5 MEDIUM
Network 		- - A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request. CWE-77
Command Injection 		CVE-2026-26461 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
1114 7.5 HIGH
Network 		- - An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) … CWE-787
 Out-of-bounds Write 		CVE-2026-37457 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
1115 6.5 MEDIUM
Network 		- - goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks the CSRF token validation that was added to the POST upload handler during the C… CWE-352
 Origin Validation Error 		CVE-2026-42091 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1116 - - - Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can upload an SVG file with XSS. The method POST /v1/fi… CWE-79
Cross-site Scripting 		CVE-2026-42138 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1117 - - - Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.91.1, the BetaLocalFilesystemMemoryTool in … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-41686 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1118 7.5 HIGH
Network 		- - Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/a… CWE-200
CWE-312
Information Exposure
 Cleartext Storage of Sensitive Information 		CVE-2026-42151 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1119 7.5 HIGH
Network 		- - Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared decoded length in a… CWE-400
CWE-789
 Uncontrolled Resource Consumption
 Memory Allocation with Excessive Size Value 		CVE-2026-42154 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
1120 3.7 LOW
Network 		- - Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number. CWE-193
 Off-by-one Error 		CVE-2026-43964 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm