Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221631 7.5 危険 WordPress.org - WordPress におけるリダイレクション制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4339 2013-10-31 18:50 2013-09-10 Show GitHub Exploit DB Packet Storm
221632 7.5 危険 WordPress.org - WordPress の wp-includes/functions.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-4338 2013-10-31 18:50 2013-09-10 Show GitHub Exploit DB Packet Storm
221633 5 警告 Wireshark - Wireshark の Websocket 解析機能における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-3562 2013-10-31 18:18 2013-05-17 Show GitHub Exploit DB Packet Storm
221634 7.8 危険 Wireshark - Wireshark における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-3561 2013-10-31 18:16 2013-05-17 Show GitHub Exploit DB Packet Storm
221635 5 警告 Wireshark - Wireshark の MPEG DSM-CC 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2013-3560 2013-10-31 18:12 2013-05-17 Show GitHub Exploit DB Packet Storm
221636 6.8 警告 X.Org Foundation - X.org libXp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-2062 2013-10-31 18:11 2013-05-23 Show GitHub Exploit DB Packet Storm
221637 5 警告 Wireshark - Wireshark の PPP CCP 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2013-3558 2013-10-31 18:08 2013-05-17 Show GitHub Exploit DB Packet Storm
221638 6.8 警告 X.Org Foundation - X.org libX11 の GetDatabase 関数および _XimParseStringFile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2004 2013-10-31 18:06 2013-05-23 Show GitHub Exploit DB Packet Storm
221639 2.1 注意 アップル - Apple Mac OS X の Power Management における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5186 2013-10-31 18:04 2013-10-22 Show GitHub Exploit DB Packet Storm
221640 1.9 注意 アップル - Apple Mac OS X の画面ロックの実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5187 2013-10-31 18:04 2013-10-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1051 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg() Claude pointed out that there is a nfs4_file refcount leak in nfsd_get_… Update NVD-CWE-Other
CVE-2026-43193 2026-05-12 05:36 2026-05-6 Show GitHub Exploit DB Packet Storm
1052 6.1 MEDIUM
Local 		- - Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Unix-like systems, al… New CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-45222 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1053 9.6 CRITICAL
Network 		praison praisonai PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by default — praisonai.rules… Update CWE-20
CWE-22
CWE-94
CWE-829
CWE-913
 Improper Input Validation 
Path Traversal
Code Injection
 Inclusion of Functionality from Untrusted Control Sphere
 Improper Control of Dynamically-Managed Code Resources 		CVE-2026-44336 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1054 9.4 CRITICAL
Network 		- - oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authentication middleware a… New CWE-22
CWE-863
Path Traversal
 Incorrect Authorization 		CVE-2026-42882 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1055 4.9 MEDIUM
Network 		- - External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to create ExternalSec… New CWE-285
Improper Authorization 		CVE-2026-42876 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1056 - - - External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.0, Namespaced SecretStore resources that used CAProvide… New CWE-285
CWE-668
Improper Authorization
 Exposure of Resource to Wrong Sphere 		CVE-2026-42875 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1057 3.7 LOW
Network 		- - Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its string arguments, and in particular will not detect the presence of the \r\n se… New CWE-113
HTTP Response Splitting 		CVE-2026-42874 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1058 6.1 MEDIUM
Network 		- - WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting (XSS) vulnerability exists in lista_arquivos_etapa.php due to improper handling of use… New CWE-79
Cross-site Scripting 		CVE-2026-42872 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1059 - - - Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers open their output as open… New CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path 		CVE-2026-42866 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1060 4.3 MEDIUM
Network 		- - @workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService.handleCallback due to insufficient valida… New CWE-601
Open Redirect 		CVE-2026-42565 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm