Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218711 7.5 危険 FoeCMS - FoeCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4850 2014-07-11 11:25 2014-07-4 Show GitHub Exploit DB Packet Storm
218712 4.3 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 シリーズの IP phone の Web ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3313 2014-07-10 18:21 2014-07-9 Show GitHub Exploit DB Packet Storm
218713 6.9 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 phone のデバッグコンソールインターフェースにおける任意の debug シェルコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2014-3312 2014-07-10 18:20 2014-07-9 Show GitHub Exploit DB Packet Storm
218714 5 警告 シスコシステムズ - Cisco IOS および IOS XE の NTP の実装における時刻同期の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3309 2014-07-10 18:19 2014-07-9 Show GitHub Exploit DB Packet Storm
218715 7.8 危険 ネットギア - Netgear GS105PE Prosafe Plus Switch に認証情報がハードコードされている問題 CWE-255
CWE-Other
CVE-2014-2969 2014-07-10 17:10 2014-07-3 Show GitHub Exploit DB Packet Storm
218716 5.1 警告 リムアーツ - Becky! Internet Mail におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3891 2014-07-10 17:06 2014-07-8 Show GitHub Exploit DB Packet Storm
218717 2.7 注意 Xen プロジェクト - Xen の arch/arm/domain.c 内の alloc_domain_struct 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4022 2014-07-10 16:50 2014-06-25 Show GitHub Exploit DB Packet Storm
218718 9.3 危険 XnSoft - XnView の xjpegls.dll フォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4988 2014-07-10 16:29 2012-06-29 Show GitHub Exploit DB Packet Storm
218719 6.9 警告 マイクロソフト - 複数の Microsoft Windows 製品の DirectShow における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2780 2014-07-10 15:02 2014-07-8 Show GitHub Exploit DB Packet Storm
218720 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの afd.sys の Ancillary Function Driver における権限昇格の脆弱性 CWE-Other
その他
CVE-2014-1767 2014-07-10 15:01 2014-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 4.8 MEDIUM
Network
- - Lumiverse is a full-featured AI chat application. Prior to 0.9.7, consumeNonce() only checks that the module-level variable is set and unexpired. It does not validate any value from the incoming HTTP… New CWE-362
Race Condition
CVE-2026-44443 2026-05-29 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
942 8.2 HIGH
Network
- - Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh invoked DangerJS from the caller's workspac… New CWE-427
CWE-829
 Uncontrolled Search Path Element
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-44358 2026-05-29 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
943 5.3 MEDIUM
Network
- - FacturaScripts is an open source accounting and invoicing software. Prior to v2026, an unauthenticated information disclosure vulnerability in the Installer controller allows any remote attacker to t… New CWE-200
Information Exposure
CVE-2026-42878 2026-05-29 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
944 3.7 LOW
Adjacent
- - free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not enforce the concurrent security procedure rules defined in 3GPP TS 33.501 §6.9.5.1. The AM… New CWE-358
 Improperly Implemented Security Check for Standard
CVE-2026-42082 2026-05-29 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
945 5.3 MEDIUM
Network
- - SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components New CWE-89
SQL Injection
CVE-2026-38808 2026-05-29 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
946 8.8 HIGH
Network
- - Insecure Permissions vulnerability in kvf-admin v1.0.0 allows a remote attacker to escalate privileges via the UserController.java component New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-38807 2026-05-29 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
947 7.8 HIGH
Local
- - Command injection in Raynet rvia 12.6.4392.49-amd64.deb allows adversaries to execute commands via getconfig, and upload through the URL argument, and oracle through the -o flag The Supplier's perspe… New CWE-77
Command Injection
CVE-2025-69600 2026-05-29 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
948 5.5 MEDIUM
Local
ibm app_connect_enterprise IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user. New CWE-922
 Insecure Storage of Sensitive Information
CVE-2026-5515 2026-05-29 00:55 2026-05-27 Show GitHub Exploit DB Packet Storm
949 7.5 HIGH
Network
ibm db2 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap. New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-6051 2026-05-29 00:55 2026-05-27 Show GitHub Exploit DB Packet Storm
950 7.5 HIGH
Network
ibm db2 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables. New CWE-400
 Uncontrolled Resource Consumption
CVE-2026-6052 2026-05-29 00:51 2026-05-27 Show GitHub Exploit DB Packet Storm