Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220691 4 警告 オラクル - Oracle MySQL における Information Schema の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1532 2013-11-12 10:09 2013-04-16 Show GitHub Exploit DB Packet Storm
220692 6 警告 オラクル - Oracle MySQL における Server Privileges の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1531 2013-11-12 10:07 2013-04-16 Show GitHub Exploit DB Packet Storm
220693 4 警告 オラクル - Oracle MySQL における Server Replication の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1526 2013-11-12 10:05 2013-04-16 Show GitHub Exploit DB Packet Storm
220694 4.6 警告 MySQL AB
オラクル
- Oracle MySQL における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1523 2013-11-12 10:04 2013-04-16 Show GitHub Exploit DB Packet Storm
220695 6.5 警告 MySQL AB
オラクル
- Oracle MySQL における Server Locking の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1521 2013-11-12 10:03 2013-04-16 Show GitHub Exploit DB Packet Storm
220696 4 警告 MySQL AB
オラクル
- Oracle MySQL における Data Manipulation Language の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1512 2013-11-12 10:01 2013-04-16 Show GitHub Exploit DB Packet Storm
220697 2.8 注意 MySQL AB
オラクル
- Oracle MySQL における Server Locking の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-1506 2013-11-12 09:59 2013-04-16 Show GitHub Exploit DB Packet Storm
220698 5 警告 Django Software Foundation - Django の認証フレームワークにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2013-1443 2013-11-11 18:51 2013-09-15 Show GitHub Exploit DB Packet Storm
220699 9.3 危険 マイクロソフト - Microsoft Visio Viewer 2010 における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0079 2013-11-11 18:51 2013-03-12 Show GitHub Exploit DB Packet Storm
220700 4.3 警告 Andy Armstrong - CGI.pm における任意の HTTP ヘッダを挿入される脆弱性 CWE-noinfo
情報不足
CVE-2010-4411 2013-11-11 18:49 2010-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1261 9.8 CRITICAL
Network
- - Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy… New CWE-122
Heap-based Buffer Overflow
CVE-2026-28780 2026-05-7 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1262 8.1 HIGH
Network
redis redis Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-aft… New CWE-416
 Use After Free
CVE-2026-23631 2026-05-7 01:14 2026-05-6 Show GitHub Exploit DB Packet Storm
1263 8.8 HIGH
Network
redis redis Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blo… New CWE-416
 Use After Free
CVE-2026-23479 2026-05-7 00:53 2026-05-6 Show GitHub Exploit DB Packet Storm
1264 7.5 HIGH
Network
- - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through… New CWE-200
Information Exposure
CVE-2026-43646 2026-05-7 00:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1265 - - - Stack-based Buffer Overflow vulnerability in the WatchGuard Agent discovery service on Windows allows Overflow Buffers. An unauthenticated attacker on the same local network could exploit this vulner… New CWE-121
Stack-based Buffer Overflow
CVE-2026-41287 2026-05-7 00:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1266 3.7 LOW
Network
- - HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-sit… New CWE-358
 Improperly Implemented Security Check for Standard
CVE-2025-31983 2026-05-7 00:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1267 3.7 LOW
Network
- - HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of s… New CWE-200
Information Exposure
CVE-2025-31982 2026-05-7 00:16 2026-05-7 Show GitHub Exploit DB Packet Storm
1268 6.1 MEDIUM
Network
n8n n8n n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth client registrations without authentication, allowi… New CWE-601
Open Redirect
CVE-2026-42230 2026-05-6 23:57 2026-05-5 Show GitHub Exploit DB Packet Storm
1269 8.8 HIGH
Network
n8n n8n n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and row:get operations allowed user-controlled input to be… New CWE-89
SQL Injection
CVE-2026-42229 2026-05-6 23:56 2026-05-5 Show GitHub Exploit DB Packet Storm
1270 6.5 MEDIUM
Network
nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler (api/settings/settings.go:24-65) serializes all settings structs to JSON and returns the… New CWE-200
Information Exposure
CVE-2026-42223 2026-05-6 23:46 2026-05-5 Show GitHub Exploit DB Packet Storm