Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
213971 4.3 警告 Debian - apt-cacher-ng の job.cc におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-4510 2014-10-9 17:38 2014-06-21 Show GitHub Exploit DB Packet Storm
213972 3.5 注意 MediaWiki - MediaWiki の Special:Preferences および Special:UserLogin のページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7295 2014-10-9 17:29 2014-09-11 Show GitHub Exploit DB Packet Storm
213973 3.6 注意 David Golden - Perl 用 Capture::Tiny モジュールにおける任意のファイルに書き込まれる脆弱性 CWE-59
リンク解釈の問題
CVE-2014-1875 2014-10-9 16:51 2014-02-6 Show GitHub Exploit DB Packet Storm
213974 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-7967 2014-10-9 16:19 2014-10-7 Show GitHub Exploit DB Packet Storm
213975 7.5 危険 Google - Windows 上で稼動する Google Chrome の base/memory/shared_memory_win.cc におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3196 2014-10-9 16:19 2014-10-7 Show GitHub Exploit DB Packet Storm
213976 6.8 警告 アップル
Google
- iOS 上で稼働する Google Chrome におけるデバイスからビデオおよびオーディオデータを取得される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3187 2014-10-9 16:19 2014-10-7 Show GitHub Exploit DB Packet Storm
213977 5 警告 Restlet - Restlet Framework におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-1868 2014-10-9 16:11 2014-02-13 Show GitHub Exploit DB Packet Storm
213978 4.3 警告 rexx systems - rexx Recruitment のユーザ登録機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1224 2014-10-9 16:01 2014-01-15 Show GitHub Exploit DB Packet Storm
213979 3.5 注意 NetComm Wireless Limited. - NetComm NB604N に格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4871 2014-10-9 12:08 2014-10-6 Show GitHub Exploit DB Packet Storm
213980 5.5 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの SSL VPN の実装における任意の RAMFS キャッシュファイルを上書きされる脆弱性 CWE-94
コード・インジェクション
CVE-2014-3399 2014-10-9 10:23 2014-10-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
421 7.7 HIGH
Network
- - Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before … New CWE-20
 Improper Input Validation 
CVE-2026-5174 2026-05-1 02:20 2026-05-1 Show GitHub Exploit DB Packet Storm
422 7.5 HIGH
Network
- - CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2. New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2025-51846 2026-05-1 02:20 2026-05-1 Show GitHub Exploit DB Packet Storm
423 9.8 CRITICAL
Network
- - Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and in… New CWE-78
OS Command 
CVE-2025-71284 2026-05-1 02:20 2026-05-1 Show GitHub Exploit DB Packet Storm
424 7.5 HIGH
Network
- - Weaver (Fanwei) E-cology 9.5 versions prior to 10.52 contain an arbitrary file read vulnerability in the XmlRpcServlet interface at the XML-RPC endpoint that allows unauthenticated remote attackers t… New CWE-22
Path Traversal
CVE-2022-50992 2026-05-1 02:19 2026-05-1 Show GitHub Exploit DB Packet Storm
425 9.8 CRITICAL
Network
- - Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicio… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2022-50993 2026-05-1 02:19 2026-05-1 Show GitHub Exploit DB Packet Storm
426 8.8 HIGH
Network
- - A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the U-SPEED N300 Rounter V1.0.0. The device does not implement CSRF protection mechanisms such as anti-CSRF… New CWE-352
 Origin Validation Error
CVE-2026-36960 2026-05-1 02:16 2026-05-1 Show GitHub Exploit DB Packet Storm
427 9.8 CRITICAL
Network
- - cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel. New CWE-306
Missing Authentication for Critical Function
CVE-2026-41940 2026-05-1 02:16 2026-04-30 Show GitHub Exploit DB Packet Storm
428 - - - In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the pee… New - CVE-2026-31692 2026-05-1 02:11 2026-04-30 Show GitHub Exploit DB Packet Storm
429 - - - In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… New - CVE-2026-31693 2026-05-1 02:11 2026-04-30 Show GitHub Exploit DB Packet Storm
430 - - - In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XENVER_build_id) is neither NUL t… New - CVE-2026-31786 2026-05-1 02:11 2026-04-30 Show GitHub Exploit DB Packet Storm