Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221261 3.3 注意 Debian
Marc Vertes		 - Debian txt2man などの製品で使用される txt2man 用の特定の Debian パッチにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-1444 2013-11-8 11:47 2013-09-25 Show GitHub Exploit DB Packet Storm
221262 4.4 警告 オラクル - Oracle Sun Solaris 10 および 11 における Remote Execution Service の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0413 2013-11-8 11:47 2013-04-16 Show GitHub Exploit DB Packet Storm
221263 3.6 注意 オラクル - Oracle Sun Solaris 8、9、10、および 11 における Utility/pax の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0412 2013-11-8 11:46 2013-04-16 Show GitHub Exploit DB Packet Storm
221264 5.9 警告 オラクル - Oracle Sun Solaris 8、9、および 10 における RBAC Configuration の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0411 2013-11-8 11:45 2013-04-16 Show GitHub Exploit DB Packet Storm
221265 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Agile EDM における Base Component - Common Objects の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0410 2013-11-8 11:44 2013-04-16 Show GitHub Exploit DB Packet Storm
221266 5 警告 オラクル - Oracle Sun Solaris 10 における CPU パフォーマンスカウンターデバイスの処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0408 2013-11-8 11:43 2013-04-16 Show GitHub Exploit DB Packet Storm
221267 4.6 警告 オラクル - Oracle Sun Solaris 10 および 11 における Kernel/DTrace Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0407 2013-11-8 11:42 2013-01-15 Show GitHub Exploit DB Packet Storm
221268 4.3 警告 オラクル - Oracle Sun Solaris 10 における Kernel/IPsec の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0406 2013-11-8 11:41 2013-04-16 Show GitHub Exploit DB Packet Storm
221269 6.4 警告 オラクル - Oracle Sun Solaris 8、9、10、および 11 における NFS クライアントマウントおよび IPv6 の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0405 2013-11-8 11:40 2013-04-16 Show GitHub Exploit DB Packet Storm
221270 3.7 注意 オラクル - Oracle Sun Solaris 10 における Kernel/Boot の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0404 2013-11-8 11:39 2013-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1121 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal races with resume Since thermal_zone_pm_complete() and thermal_zone_device_resume() r… CWE-416
 Use After Free 		CVE-2026-31731 2026-05-8 22:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1122 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx->remote_heap fastrpc_init_create_static_process() may free cctx->remote_heap on the e… CWE-415
 Double Free 		CVE-2026-31730 2026-05-8 22:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1123 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-2710 2026-05-8 08:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1124 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-34429. Reason: This candidate is a duplicate of CVE-2026-34429. Notes: All CVE users should reference CVE-2026-344… - CVE-2026-44365 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1125 7.7 HIGH
Network 		- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastR… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41905 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
1126 7.1 HIGH
Local 		gitpython_project gitpython GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application … CWE-22
Path Traversal 		CVE-2026-44243 2026-05-8 06:12 2026-05-8 Show GitHub Exploit DB Packet Storm
1127 5.3 MEDIUM
Network 		- - ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an att… CWE-789
 Memory Allocation with Excessive Size Value 		CVE-2026-42241 2026-05-8 05:37 2026-05-8 Show GitHub Exploit DB Packet Storm
1128 - - - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid o… CWE-295
Improper Certificate Validation  		CVE-2026-42225 2026-05-8 05:36 2026-05-8 Show GitHub Exploit DB Packet Storm
1129 8.1 HIGH
Network 		- - Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.… CWE-1004
 Sensitive Cookie Without 'HttpOnly' Flag 		CVE-2026-42239 2026-05-8 05:35 2026-05-8 Show GitHub Exploit DB Packet Storm
1130 7.6 HIGH
Network 		- - manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. F… CWE-266
 Incorrect Privilege Assignment 		CVE-2026-43510 2026-05-8 05:32 2026-05-8 Show GitHub Exploit DB Packet Storm