Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220381 2.6 注意 Apache Software Foundation - Apache Subversion 用 mod_dontdothat の is_this_legal 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4505 2014-04-7 17:32 2013-11-25 Show GitHub Exploit DB Packet Storm
220382 1.8 注意 Memcached - Memcached におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7291 2014-04-7 17:23 2013-12-20 Show GitHub Exploit DB Packet Storm
220383 1.8 注意 Memcached - Memcached の items.c の do_item_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-7290 2014-04-7 17:21 2013-12-20 Show GitHub Exploit DB Packet Storm
220384 4.8 警告 Memcached - Memcached における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-7239 2014-04-7 17:20 2013-12-20 Show GitHub Exploit DB Packet Storm
220385 5 警告 The PHP Group
アップル
- PHP の SOAP パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1643 2014-04-7 17:18 2013-02-21 Show GitHub Exploit DB Packet Storm
220386 7.5 危険 The PHP Group
アップル
- PHP の ext/soap/soap.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1635 2014-04-7 17:17 2013-02-21 Show GitHub Exploit DB Packet Storm
220387 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2249 2014-04-7 17:05 2014-03-12 Show GitHub Exploit DB Packet Storm
220388 7.1 危険 ZyXEL - ZyXEL P660 シリーズにサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-3588 2014-04-7 15:44 2014-04-1 Show GitHub Exploit DB Packet Storm
220389 7.5 危険 CA Technologies - CA ERwin Web Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2210 2014-04-7 15:04 2014-04-3 Show GitHub Exploit DB Packet Storm
220390 5 警告 シスコシステムズ - Cisco IOS および IOS XE の IKE の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2143 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2831 6.2 MEDIUM
Physics
- - Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275
 Permission Issues
CVE-2026-41969 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2832 6.8 MEDIUM
Adjacent
- - Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787
 Out-of-bounds Write
CVE-2026-41970 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2833 5.5 MEDIUM
Local
- - Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-840
 Business Logic Errors
CVE-2026-41971 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
2834 8.3 HIGH
Network
pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … CWE-441
CWE-863
CWE-918
Confused Deputy
 Incorrect Authorization
Server-Side Request Forgery (SSRF) 
CVE-2026-42313 2026-05-15 23:04 2026-05-12 Show GitHub Exploit DB Packet Storm
2835 6.7 MEDIUM
Local
fortinet fortiap
fortiap-u
fortiap-w2
An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5… CWE-78
OS Command 
CVE-2025-53680 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
2836 7.2 HIGH
Network
fortinet fortimail An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5,… CWE-89
SQL Injection
CVE-2025-53681 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
2837 8.8 HIGH
Network
fortinet fortios A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via spe… CWE-787
 Out-of-bounds Write
CVE-2025-53844 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
2838 5.3 MEDIUM
Network
fortinet fortianalyzer
fortimanager
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions,… CWE-676
 Use of Potentially Dangerous Function
CVE-2025-67604 2026-05-15 23:03 2026-05-13 Show GitHub Exploit DB Packet Storm
2839 7.2 HIGH
Network
ivanti virtual_traffic_manager OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. CWE-78
OS Command 
CVE-2026-8051 2026-05-15 22:58 2026-05-13 Show GitHub Exploit DB Packet Storm
2840 6.5 MEDIUM
Network
pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, package folder names are sanitized using insufficient string replacement. The pattern ....// becomes .._ … CWE-22
Path Traversal
CVE-2026-42314 2026-05-15 22:43 2026-05-12 Show GitHub Exploit DB Packet Storm