Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220691 6.9 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1964 2013-12-6 15:32 2013-04-18 Show GitHub Exploit DB Packet Storm
220692 7.5 危険 MyBB Group - MyBB 用 Ajax forum stat プラグインの ajaxfs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6936 2013-12-6 15:17 2013-11-20 Show GitHub Exploit DB Packet Storm
220693 4.3 警告 Elecsys Corporation - Linux Kernel ベースの Director Industrial Communication Gateway デバイスの Outstation コンポーネントの DNP3 サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2825 2013-12-6 13:46 2013-12-3 Show GitHub Exploit DB Packet Storm
220694 5.8 警告 サイボウズ - サイボウズ ガルーンにおけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6004 2013-12-6 10:52 2013-12-3 Show GitHub Exploit DB Packet Storm
220695 4 警告 サイボウズ - サイボウズ ガルーンにおけるメールヘッダインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6003 2013-12-6 10:49 2013-12-3 Show GitHub Exploit DB Packet Storm
220696 4.3 警告 サイボウズ - サイボウズ ガルーンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-6002 2013-12-6 10:48 2013-12-3 Show GitHub Exploit DB Packet Storm
220697 6 警告 サイボウズ - サイボウズ ガルーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6001 2013-12-6 10:46 2013-12-3 Show GitHub Exploit DB Packet Storm
220698 5 警告 サイボウズ - サイボウズ ガルーンにおける複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6900
CVE-2013-6901
CVE-2013-6902
CVE-2013-6903
CVE-2013-6904
CVE-2013-6905
CVE-2013-6906
CVE-2013-6907
CVE-2013-6908
CVE-2013-6909
CVE-2013-6910
CVE-2013-691… 		2013-12-6 10:41 2013-12-3 Show GitHub Exploit DB Packet Storm
220699 5 警告 たっちゃんのＨＰ - 改造版 TOWN におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6000 2013-12-6 10:37 2013-11-29 Show GitHub Exploit DB Packet Storm
220700 4.9 警告 Linux - Linux Kernel の net/rose/af_rose.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3234 2013-12-5 18:02 2013-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1521 6.5 MEDIUM
Network 		- - FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an unauthenticated attacker to wri… CWE-22
Path Traversal 		CVE-2026-43975 2026-05-6 23:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1522 8.1 HIGH
Network 		apache atlas Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can … CWE-94
Code Injection 		CVE-2026-40563 2026-05-6 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
1523 6.6 MEDIUM
Local 		- - Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects. The supported versions that is affected is v2.3.2. Easily exploitable vulnerability… CWE-94
Code Injection 		CVE-2026-35255 2026-05-6 23:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1524 6.1 MEDIUM
Local 		- - Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects. The supported versions that is affected is 3.77. Easily exploitable vulnerability allows unauthenticated attacker with netw… CWE-22
Path Traversal 		CVE-2026-35254 2026-05-6 23:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1525 8.1 HIGH
Adjacent 		- - BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attac… CWE-122
Heap-based Buffer Overflow 		CVE-2026-29004 2026-05-6 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
1526 4.7 MEDIUM
Network 		- - Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker w… - CVE-2026-35253 2026-05-6 22:26 2026-05-6 Show GitHub Exploit DB Packet Storm
1527 - - - In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_ts_pcr_write_into() take their… - CVE-2026-43058 2026-05-6 22:08 2026-05-2 Show GitHub Exploit DB Packet Storm
1528 - - - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Commit 302a1f674c00 ("Bluetooth: MGMT: Fix possible UAF… - CVE-2026-43059 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
1529 - - - In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix TX deadlock when using DMA `dmaengine_terminate_async` does not guarantee that the `__dma_tx_complete` callback… - CVE-2026-43061 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm
1530 - - - In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when t… - CVE-2026-43064 2026-05-6 22:08 2026-05-6 Show GitHub Exploit DB Packet Storm