Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213521 6.4 警告 TIBCO Software - 複数の TIBCO 製品の ActiveMatrix Policy Manager Authentication モジュールにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5286 2015-02-23 13:47 2014-08-6 Show GitHub Exploit DB Packet Storm
213522 7.8 危険 シスコシステムズ - Cisco TelePresence MCU デバイスのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-0621 2015-02-23 11:14 2015-02-17 Show GitHub Exploit DB Packet Storm
213523 4 警告 シスコシステムズ - Cisco TelePresence Management Suite の XML パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-0620 2015-02-23 10:59 2015-02-16 Show GitHub Exploit DB Packet Storm
213524 5 警告 シスコシステムズ - Cisco ASR 5500 System Architecture Evolution Gateway デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-0617 2015-02-23 10:53 2015-02-17 Show GitHub Exploit DB Packet Storm
213525 3.5 注意 webform prepopulate block project - Drupal 用 Webform prepopulate block モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1621 2015-02-23 10:32 2015-02-10 Show GitHub Exploit DB Packet Storm
213526 3.5 注意 マカフィー - McAfee Email Gateway の Secure Web Mail Client ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1619 2015-02-23 10:21 2015-01-6 Show GitHub Exploit DB Packet Storm
213527 4 警告 マカフィー - McAfee Data Loss Prevention Endpoint の ePO エクステンションにおける重要なパスワード情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-1618 2015-02-23 10:15 2015-01-20 Show GitHub Exploit DB Packet Storm
213528 3.5 注意 マカフィー - McAfee Data Loss Prevention Endpoint の ePO エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1617 2015-02-23 10:11 2015-01-20 Show GitHub Exploit DB Packet Storm
213529 6.5 警告 マカフィー - McAfee Data Loss Prevention Endpoint の ePO エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2015-1616 2015-02-23 10:05 2015-01-20 Show GitHub Exploit DB Packet Storm
213530 4.3 警告 Jose Pardilla - WordPress 用 FancyBox プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-1494 2015-02-23 09:54 2015-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2711 - - - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain a… CWE-862
 Missing Authorization
CVE-2026-34154 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
2712 5.9 MEDIUM
Network
- - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attack… CWE-863
 Incorrect Authorization
CVE-2026-41470 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
2713 - - - Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 … CWE-250
 Execution with Unnecessary Privileges
CVE-2026-8370 2026-05-20 06:01 2026-05-20 Show GitHub Exploit DB Packet Storm
2714 8.8 HIGH
Network
getgrav grav Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blueprint-upload to write an arbitrary YAML file into user/acco… CWE-269
CWE-434
 Improper Privilege Management
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-42844 2026-05-20 06:00 2026-05-13 Show GitHub Exploit DB Packet Storm
2715 7.5 HIGH
Network
- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation and missing capability check in … CWE-23
 Relative Path Traversal
CVE-2026-8073 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
2716 6.5 MEDIUM
Network
- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6. This is due to the plugin not p… CWE-862
 Missing Authorization
CVE-2026-8096 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
2717 7.8 HIGH
Local
protobufjs_project protobufjs-cli protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it through child_process… CWE-78
OS Command 
CVE-2026-42290 2026-05-20 05:56 2026-05-14 Show GitHub Exploit DB Packet Storm
2718 5.3 MEDIUM
Network
protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded … CWE-176
 Improper Handling of Unicode Encoding
CVE-2026-44288 2026-05-20 05:46 2026-05-14 Show GitHub Exploit DB Packet Storm
2719 8.7 HIGH
Network
protobufjs_project protobufjs-cli protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbjs static code generation could emit unsafe JavaScript identifiers derived from schema-controlled names. When ge… CWE-94
Code Injection
CVE-2026-44295 2026-05-20 05:37 2026-05-14 Show GitHub Exploit DB Packet Storm
2720 7.2 HIGH
Network
dkfz nnu-net nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable… CWE-74
Injection
CVE-2026-44246 2026-05-20 05:10 2026-05-13 Show GitHub Exploit DB Packet Storm