Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
213791 9 危険 Schneider Electric - Schneider Electric ProClima の MDraw30.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-9188 2015-01-6 10:46 2014-12-10 Show GitHub Exploit DB Packet Storm
213792 7.5 危険 Schneider Electric - Schneider Electric ProClima の MDraw30.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8514 2015-01-6 10:45 2014-12-10 Show GitHub Exploit DB Packet Storm
213793 7.5 危険 Schneider Electric - Schneider Electric ProClima の MDraw30.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8513 2015-01-6 10:45 2014-12-10 Show GitHub Exploit DB Packet Storm
213794 7.5 危険 Schneider Electric - Schneider Electric ProClima の Atx45.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8512 2015-01-6 10:45 2014-12-10 Show GitHub Exploit DB Packet Storm
213795 10 危険 Schneider Electric - Schneider Electric ProClima の Atx45.ocx の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8511 2015-01-6 10:44 2014-12-10 Show GitHub Exploit DB Packet Storm
213796 7.2 危険 Cray Inc. - Cray Linux Environment の Cray デバイス上で稼動する apinit における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0748 2015-01-6 10:19 2014-01-31 Show GitHub Exploit DB Packet Storm
213797 4.3 警告 Eucalyptus Systems - Eucalyptus のクラウドコントローラコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-4769 2015-01-5 19:53 2013-07-5 Show GitHub Exploit DB Packet Storm
213798 3.5 注意 Owl Intranet Engine - Owl Intranet Knowledgebase におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4754 2015-01-5 19:44 2013-07-2 Show GitHub Exploit DB Packet Storm
213799 3.5 注意 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4753 2015-01-5 19:36 2013-07-2 Show GitHub Exploit DB Packet Storm
213800 4.9 警告 Linux - Linux Kernel の fs/isofs/rock.c の rock_continue 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-9420 2015-01-5 18:55 2014-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2271 7.5 HIGH
Network 		- - In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversi… CWE-326
Inadequate Encryption Strength 		CVE-2026-33361 2026-05-14 00:36 2026-05-12 Show GitHub Exploit DB Packet Storm
2272 8.6 HIGH
Network 		- - In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded an… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-33362 2026-05-14 00:36 2026-05-12 Show GitHub Exploit DB Packet Storm
2273 8.4 HIGH
Network 		- - A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher throu… CWE-35
 Path Traversal: '.../...//' 		CVE-2026-25705 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2274 9.9 CRITICAL
Network 		- - Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on … CWE-863
 Incorrect Authorization 		CVE-2026-41050 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2275 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2276 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2277 8.8 HIGH
Adjacent 		- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… CWE-79
Cross-site Scripting 		CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2278 7.2 HIGH
Network 		- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… CWE-78
OS Command  		CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2279 7.2 HIGH
Network 		- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… CWE-78
OS Command  		CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
2280 5.3 MEDIUM
Network 		- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… CWE-776
XML Entity Expansion 		CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm