Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213231 4.3 警告 Beehive Forum - Beehive Forum の edit_prefs.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2198 2015-03-5 13:40 2015-02-22 Show GitHub Exploit DB Packet Storm
213232 3.5 注意 Entity API project - Drupal 用 Entity API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2197 2015-03-5 13:37 2015-02-25 Show GitHub Exploit DB Packet Storm
213233 6.5 警告 Magic Hills Pty Ltd - WordPress 用 WonderPlugin Audio Player プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-2199 2015-03-5 12:18 2015-01-21 Show GitHub Exploit DB Packet Storm
213234 7.5 危険 Web-Dorado - WordPress 用 Spider Event Calendar における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-2196 2015-03-5 12:17 2015-02-12 Show GitHub Exploit DB Packet Storm
213235 4.3 警告 Jordy Meow - WordPress 用 WP Media Cleaner プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-2195 2015-03-5 12:16 2015-02-26 Show GitHub Exploit DB Packet Storm
213236 6.5 警告 Digital Nature - Wordpress 用 Fusion テーマにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-2194 2015-03-5 12:15 2015-02-13 Show GitHub Exploit DB Packet Storm
213237 2.6 注意 TYPO3 Association - TYPO3 の rsaauth エクステンションにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2015-2047 2015-03-4 16:04 2015-02-19 Show GitHub Exploit DB Packet Storm
213238 5 警告 BestWebSoft - WordPress 用プラグイン Google Captcha (reCAPTCHA) by BestWebSoft における CAPTCHA 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2015-0890 2015-03-4 15:21 2015-03-3 Show GitHub Exploit DB Packet Storm
213239 5 警告 BestWebSoft - WordPress 用プラグイン Captcha における CAPTCHA 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2014-9283 2015-03-4 15:21 2015-03-3 Show GitHub Exploit DB Packet Storm
213240 4.3 警告 IBM - IBM Notes Traveler で配布される Window Phone 用 IBM Notes Traveler Companion アプリケーションにおける認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい
CVE-2014-8921 2015-03-4 15:07 2014-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2591 7.8 HIGH
Local
- - Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path… CWE-428
 Unquoted Search Path or Element
CVE-2020-37230 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2592 7.5 HIGH
Network
- - Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoi… CWE-22
Path Traversal
CVE-2021-47942 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2593 9.8 CRITICAL
Network
- - GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file uploa… CWE-306
Missing Authentication for Critical Function
CVE-2018-25332 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2594 8.2 HIGH
Network
- - Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the … CWE-89
SQL Injection
CVE-2018-25333 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2595 9.1 CRITICAL
Network
- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… CWE-94
Code Injection
CVE-2026-41258 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2596 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature
CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2597 7.5 HIGH
Network
- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2598 9.8 CRITICAL
Network
- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection
CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2599 5.5 MEDIUM
Local
- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2600 8.8 HIGH
Network
google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write
CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm