Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216031 7.2 危険 Huawei - Huawei P2-6011 の hx170dec デバイスドライバにおける任意のメモリ領域を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2273 2014-12-8 14:09 2014-12-2 Show GitHub Exploit DB Packet Storm
216032 7.5 危険 PBBoard - PBBoard の includes/functions.class.php の CheckEmail 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9215 2014-12-8 14:02 2014-11-28 Show GitHub Exploit DB Packet Storm
216033 4.3 警告 Altitude Software - Altitude uCI の Altitude uAgent におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9212 2014-12-8 13:47 2014-12-3 Show GitHub Exploit DB Packet Storm
216034 6.8 警告 CreativeMinds - WordPress 用 CreativeMinds CM Downloads Manager プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9129 2014-12-8 13:38 2014-12-1 Show GitHub Exploit DB Packet Storm
216035 4.3 警告 Nextend - WordPress 用 Nextend Facebook Connect プラグインの nextend-facebook-settings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8800 2014-12-8 13:38 2014-11-24 Show GitHub Exploit DB Packet Storm
216036 7.5 危険 Technicolor - Technicolor ルータ TD5130 のファームウェアにおける任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-9144 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216037 4.3 警告 Technicolor - Technicolor ルータ TD5130 のファームウェアにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-9143 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216038 4.3 警告 Technicolor - Technicolor ルータ TD5130 のファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9142 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216039 7.5 危険 Zoho Corporation - 複数の ManageEngine 製品の MetadataServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3997 2014-12-8 11:31 2014-08-19 Show GitHub Exploit DB Packet Storm
216040 7.5 危険 Zoho Corporation - 複数の ManageEngine 製品の LinkViewFetchServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3996 2014-12-8 11:30 2014-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1221 8.1 HIGH
Network
- - e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l… New CWE-20
CWE-807
 Improper Input Validation 
 Reliance on Untrusted Inputs in a Security Decision
CVE-2026-43935 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1222 - - - Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th… New CWE-552
CWE-918
 Files or Directories Accessible to External Parties
Server-Side Request Forgery (SSRF) 
CVE-2026-40564 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1223 - - - An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability. New CWE-22
Path Traversal
CVE-2026-40384 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1224 - - - An improper access check allows unauthorized access to com_config webservice endpoints. New CWE-284
Improper Access Control
CVE-2026-35223 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1225 - - - A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-2264 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1226 7.8 HIGH
Local
- - NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-24162 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1227 5.3 MEDIUM
Network
- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the inst… New CWE-1392
 Use of Default Credentials
CVE-2025-36221 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1228 4.3 MEDIUM
Network
- - IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, … New CWE-89
SQL Injection
CVE-2025-36220 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1229 5.4 MEDIUM
Network
- - IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allo… New CWE-79
Cross-site Scripting
CVE-2025-36148 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1230 5.4 MEDIUM
Network
- - IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. New CWE-923
 Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-36145 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm