Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221101 6.9 警告 クアルコム - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 Goodix gt915 タッチスクリーンドライバにおける権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-4740 2013-11-13 15:07 2013-11-7 Show GitHub Exploit DB Packet Storm
221102 4.3 警告 OpenStack - OpenStack Cinder Grizzly におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4202 2013-11-13 15:01 2013-08-8 Show GitHub Exploit DB Packet Storm
221103 2.1 注意 OpenStack - OpenStack Cinder の LVMVolumeDriver ドライバの clear_volume 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4183 2013-11-13 14:57 2013-09-3 Show GitHub Exploit DB Packet Storm
221104 5.8 警告 OpenStack
Novell		 - Glance 用 Python クライアントライブラリにおける SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4111 2013-11-13 14:53 2013-07-22 Show GitHub Exploit DB Packet Storm
221105 6.9 警告 Linux - Linux Kernel の drivers/uio/uio.c の uio_mmap_physical 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-6763 2013-11-13 14:51 2013-10-29 Show GitHub Exploit DB Packet Storm
221106 4.9 警告 Linux - Linux Kernel の drivers/staging/sb105x/sb_pci_mp.c の mp_get_count 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4516 2013-11-13 14:48 2013-10-30 Show GitHub Exploit DB Packet Storm
221107 4.9 警告 Linux - Linux Kernel の drivers/staging/bcm/Bcmchar.c の bcm_char_ioctl 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4515 2013-11-13 14:48 2013-10-30 Show GitHub Exploit DB Packet Storm
221108 4.7 警告 Linux - Linux Kernel の drivers/staging/wlags49_h2/wl_priv.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4514 2013-11-13 14:48 2013-10-30 Show GitHub Exploit DB Packet Storm
221109 4.7 警告 Linux - Linux Kernel の arch/um/kernel/exitcode.c の exitcode_proc_write 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4512 2013-11-13 14:47 2013-10-30 Show GitHub Exploit DB Packet Storm
221110 6.9 警告 Linux - Linux Kernel の Alchemy LCD フレームバッファドライバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-4511 2013-11-13 14:46 2013-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
751 7.5 HIGH
Network 		- - A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module pr… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-42501 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
752 8.2 HIGH
Network 		- - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware passes the user-controlled ln… CWE-22
CWE-918
Path Traversal
Server-Side Request Forgery (SSRF)  		CVE-2026-42353 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
753 7.5 HIGH
Network 		- - locize is a localization platform that connects code and i18n setup. Prior to version 4.0.21, the locize client SDK registers a window.addEventListener("message", …) handler that dispatches to regist… CWE-79
CWE-346
Cross-site Scripting
 Origin Validation Error 		CVE-2026-41886 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
754 6.5 MEDIUM
Network 		- - i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in the browser and for Deno. Prior to version 9.0.2, i18next-locize-backend interpolates lng, ns, proje… CWE-22
CWE-74
Path Traversal
Injection 		CVE-2026-41885 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
755 8.1 HIGH
Network 		- - OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applica… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2026-41883 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
756 8.2 HIGH
Network 		- - i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options… CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-41693 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
757 8.6 HIGH
Network 		- - 18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Versions prior to 3.9.3 allow an unauthenticated HTTP client to pollute Object… CWE-22
CWE-1321
Path Traversal
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2026-41690 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
758 8.6 HIGH
Network 		- - i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. Prior to version 3.9.3, i18next-http-middleware wrote user-controlled languag… CWE-79
CWE-113
Cross-site Scripting
HTTP Response Splitting 		CVE-2026-41683 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
759 6.4 MEDIUM
Network 		- - Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style… CWE-79
Cross-site Scripting 		CVE-2026-41591 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm
760 10.0 CRITICAL
Network 		- - openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows. From version 1.26.3 to before version 1.27.3, when openvpn-auth… CWE-287
Improper Authentication 		CVE-2026-41070 2026-05-9 01:16 2026-05-9 Show GitHub Exploit DB Packet Storm