Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
211 8.8 重要
Network
Snorkel AI, Inc. Snorkel Snorkel AI, Inc.のSnorkelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-31224 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
212 8.8 重要
Network
デル Dell Automation Platform デルのDell Automation Platformにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2026-32658 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
213 7.8 重要
Local
WELLBIA.COM CO.,LTD XIGNCODE3 WELLBIA.COM CO.,LTDのXIGNCODE3における不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2026-3609 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
214 4.9 警告
Network
aiven Aiven Operator aivenのAiven Operatorにおける複数の脆弱性 New CWE-269
CWE-441
CVE-2026-39961 2026-05-15 10:54 2026-04-9 Show GitHub Exploit DB Packet Storm
215 8.8 重要
Network
AGiXT AGiXT AGiXTにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-39981 2026-05-15 10:54 2026-04-9 Show GitHub Exploit DB Packet Storm
216 7.5 重要
Network
Succinct SP1 SuccinctのSP1における複数の脆弱性 New CWE-345
CWE-354
CVE-2026-40323 2026-05-15 10:54 2026-04-18 Show GitHub Exploit DB Packet Storm
217 8.8 重要
Network
Electric Sync-service ElectricのSync-serviceにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション
CVE-2026-40906 2026-05-15 10:54 2026-04-21 Show GitHub Exploit DB Packet Storm
218 6.5 警告
Network
Apache Software Foundation Apache-airflow-providers-elasticsearch Apache Software FoundationのApache-airflow-providers-elasticsearchにおけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい
CVE-2026-41018 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
219 6.5 警告
Network
BETTER-AUTH. Better Auth OAuth Provider BETTER-AUTH.のBetter Auth OAuth Providerにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-41427 2026-05-15 10:54 2026-04-24 Show GitHub Exploit DB Packet Storm
220 8.6 重要
Network
Inngest Inngest Inngestにおける複数の脆弱性 New CWE-200
CWE-497
CVE-2026-42047 2026-05-15 10:54 2026-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346671 - vmware workstation VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via "symlink manipulation." NVD-CWE-Other
CVE-2003-0480 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346672 - gero_kohnert tutos Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php. NVD-CWE-Other
CVE-2003-0481 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346673 - gero_kohnert tutos TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code. NVD-CWE-Other
CVE-2003-0482 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346674 - phpbb_group phpbb Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter. NVD-CWE-Other
CVE-2003-0484 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346675 - progress 4gl_compiler Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type. NVD-CWE-Other
CVE-2003-0485 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346676 - dantz retrospect_client The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to… NVD-CWE-Other
CVE-2003-0490 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346677 - mytutorials tutorials The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file. NVD-CWE-Other
CVE-2003-0491 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346678 - snitz_communications snitz_forums_2000 Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID. NVD-CWE-Other
CVE-2003-0493 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346679 - microsoft windows_2000 Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument. NVD-CWE-Other
CVE-2003-0503 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm
346680 - phpgroupware phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware 0.9.14.003 (aka webdistro) allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to index.p… NVD-CWE-Other
CVE-2003-0504 2016-10-18 11:34 2003-08-7 Show GitHub Exploit DB Packet Storm