Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
214611 7.5 危険 Ettercap Project - Ettercap の dissectors/ec_radius.c の radius_get_attribute 関数におけるサービス運用妨害 (DoS) 状態にされる脆弱性 CWE-119
バッファエラー
CVE-2014-9379 2014-12-22 17:28 2014-12-18 Show GitHub Exploit DB Packet Storm
214612 7.5 危険 Ettercap Project - Ettercap におけるサービス運用妨害 (DoS) 状態にされる脆弱性 CWE-20
不適切な入力確認
CVE-2014-9378 2014-12-22 17:27 2014-12-16 Show GitHub Exploit DB Packet Storm
214613 7.5 危険 Ettercap Project - Ettercap の plug-ins/nbns_spoof/nbns_spoof.c の nbns_spoof 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9377 2014-12-22 17:27 2014-12-16 Show GitHub Exploit DB Packet Storm
214614 7.5 危険 Ettercap Project - Ettercap における整数アンダーフローの脆弱性 CWE-Other
その他
CVE-2014-9376 2014-12-22 17:26 2014-12-16 Show GitHub Exploit DB Packet Storm
214615 5 警告 Password Generator project - Password Generator における擬似的に生成される数字を推測される脆弱性 CWE-310
暗号の問題
CVE-2013-4442 2014-12-22 17:21 2013-06-6 Show GitHub Exploit DB Packet Storm
214616 5 警告 Password Generator project - Password Generator におけるパスワードを推測される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4440 2014-12-22 17:21 2013-06-6 Show GitHub Exploit DB Packet Storm
214617 7.5 危険 Ettercap Project - Ettercap の dissectors/ec_postgresql.c の dissector_postgresql 関数 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-6396 2014-12-22 16:16 2014-10-16 Show GitHub Exploit DB Packet Storm
214618 7.5 危険 Ettercap Project - Ettercap の dissectors/ec_postgresql.c の dissector_postgresql 関数 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-6395 2014-12-22 16:16 2014-10-16 Show GitHub Exploit DB Packet Storm
214619 5 警告 Ekahau, Inc. - 複数の Ekahau 製品におけるセットアップキーを推測される脆弱性 CWE-200
情報漏えい
CVE-2014-9408 2014-12-22 16:12 2014-12-15 Show GitHub Exploit DB Packet Storm
214620 6.8 警告 Revive Adserver - Revive Adserver におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9407 2014-12-22 16:02 2014-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2591 7.8 HIGH
Local
- - Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path… CWE-428
 Unquoted Search Path or Element
CVE-2020-37230 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2592 7.5 HIGH
Network
- - Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoi… CWE-22
Path Traversal
CVE-2021-47942 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2593 9.8 CRITICAL
Network
- - GitBucket 4.23.1 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands by exploiting weak secret token generation and insecure file uploa… CWE-306
Missing Authentication for Critical Function
CVE-2018-25332 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2594 8.2 HIGH
Network
- - Nordex N149/4.0-4.5 Wind Turbine Web Server 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the … CWE-89
SQL Injection
CVE-2018-25333 2026-05-19 05:16 2026-05-17 Show GitHub Exploit DB Packet Storm
2595 9.1 CRITICAL
Network
- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… CWE-94
Code Injection
CVE-2026-41258 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2596 - - - LibJWT is a C JSON Web Token Library. From 3.0.0 to 3.3.2, libjwt accepts an RSA JWK that does not contain an alg parameter as the verification key for an HS256/HS384/HS512 token. In the OpenSSL back… CWE-327
CWE-347
 Use of a Broken or Risky Cryptographic Algorithm
 Improper Verification of Cryptographic Signature
CVE-2026-44699 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2597 7.5 HIGH
Network
- - The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends() contains two fast-path verification bugs for standard P2PKH and native P2WPKH… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-44714 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2598 9.8 CRITICAL
Network
- - MCP Calculate Server is a mathematical calculation service based on MCP protocol and SymPy library. Prior to 0.1.1, the use of eval() to evaluate mathematical expressions without proper input sanitiz… CWE-94
Code Injection
CVE-2026-44717 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2599 5.5 MEDIUM
Local
- - Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-46383 2026-05-19 04:59 2026-05-16 Show GitHub Exploit DB Packet Storm
2600 8.8 HIGH
Network
google chrome Out of bounds write in WebAudio in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hig… CWE-787
 Out-of-bounds Write
CVE-2026-8524 2026-05-19 04:43 2026-05-15 Show GitHub Exploit DB Packet Storm