Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215451 7.5 危険 SAP - SAP NetWeaver AS ABAP および SAP HANA で使用される SAPCRYPTOLIB などの製品における DSA 署名を偽装される脆弱性 CWE-310
暗号の問題
CVE-2014-8587 2014-11-6 18:08 2014-10-15 Show GitHub Exploit DB Packet Storm
215452 7.5 危険 CodePeople - WordPress 用 CP Multi View Event Calendar プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8586 2014-11-6 16:31 2014-10-23 Show GitHub Exploit DB Packet Storm
215453 5 警告 WordPress Download Manager - WordPress 用 WordPress Download Manager プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-59
リンク解釈の問題
CVE-2014-8585 2014-11-6 16:30 2014-10-26 Show GitHub Exploit DB Packet Storm
215454 4.3 警告 Web-Dorado - WordPress 用 Web Dorado Spider Video Player プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8584 2014-11-6 16:29 2014-11-3 Show GitHub Exploit DB Packet Storm
215455 7.5 危険 clip-share
NuevoLab.com.
- ClipShare 用 Nuevolab Nuevoplayer の midroll.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8339 2014-11-6 15:50 2014-10-28 Show GitHub Exploit DB Packet Storm
215456 6.5 警告 EllisLab, Inc. - EllisLab ExpressionEngine における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-5387 2014-11-6 15:49 2014-10-3 Show GitHub Exploit DB Packet Storm
215457 6.8 警告 Axway - Axway SecureTransport におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-7057 2014-11-6 15:49 2013-12-11 Show GitHub Exploit DB Packet Storm
215458 5 警告 Epicor Software - Epicor Enterprise におけるデータベース接続のパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4311 2014-11-6 15:49 2014-09-30 Show GitHub Exploit DB Packet Storm
215459 5 警告 レッドハット - FreeIPA のディレクトリサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-0336 2014-11-6 15:48 2013-02-26 Show GitHub Exploit DB Packet Storm
215460 7.5 危険 Joomla!
Akeeba
- 複数の製品で使用される Akeeba 製品 における暗号化を回避される脆弱性 CWE-310
暗号の問題
CVE-2014-7228 2014-11-6 15:48 2014-09-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1211 - - - A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on t… CWE-787
 Out-of-bounds Write
CVE-2026-0263 2026-05-14 03:17 2026-05-14 Show GitHub Exploit DB Packet Storm
1212 - - - A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (Do… CWE-122
Heap-based Buffer Overflow
CVE-2026-0264 2026-05-14 03:17 2026-05-14 Show GitHub Exploit DB Packet Storm
1213 - - - An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Servi… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2026-0265 2026-05-14 03:17 2026-05-14 Show GitHub Exploit DB Packet Storm
1214 5.9 MEDIUM
Network
- - OpenTelemetry.OpAmp.Client is the OpAMP client for OpenTelemetry .NET. Prior to 0.2.0-alpha.1, when receiving responses from the OpAMP server over HTTP, the OpAMP client allocates an unbounded buffer… CWE-789
 Memory Allocation with Excessive Size Value
CVE-2026-42348 2026-05-14 03:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1215 6.5 MEDIUM
Local
- - OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exporter.OpenTelemetryPro… CWE-379
 Creation of Temporary File in Directory with Incorrect Permissions
CVE-2026-42191 2026-05-14 03:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1216 6.3 MEDIUM
Network
- - Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.19.18, Lemmy allows an authenticated low-privileged user to create a link post through POST /api/v3/post. When a post is cre… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42180 2026-05-14 03:16 2026-05-9 Show GitHub Exploit DB Packet Storm
1217 5.5 MEDIUM
Local
- - Buffer Overflow vulnerability in Ardupiot Copter Latest commit 92693e023793133e49a035daf37c14433e484778 allows a local attacker to cause a denial of service via the AP_MSP::loop, AP_MSP, AP_MSP.cpp c… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2024-51394 2026-05-14 03:16 2026-05-14 Show GitHub Exploit DB Packet Storm
1218 5.0 MEDIUM
Network
- - mosparo is the modern solution to protect your online forms from spam. Prior to 1.4.13, the automatic rule package source URL feature allows a project member with the editor role to store an attacker… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41195 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1219 - - - django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified requ… CWE-22
CWE-26
Path Traversal
 Path Traversal: '/dir/../filename'
CVE-2026-42196 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm
1220 7.5 HIGH
Network
- - Snappier is a high performance C# implementation of the Snappy compression algorithm. Prior to 1.3.1, Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-f… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-44302 2026-05-14 03:15 2026-05-13 Show GitHub Exploit DB Packet Storm