Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225251 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0771 2013-02-25 16:06 2013-01-8 Show GitHub Exploit DB Packet Storm
225252 10 危険 Mozilla Foundation - 複数の Mozilla 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0768 2013-02-25 16:04 2013-01-8 Show GitHub Exploit DB Packet Storm
225253 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の nsSOCKSSocketInfo::ConnectToProxy 関数における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2013-0764 2013-02-25 16:03 2013-01-8 Show GitHub Exploit DB Packet Storm
225254 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0763 2013-02-25 16:02 2013-01-8 Show GitHub Exploit DB Packet Storm
225255 10 危険 Mozilla Foundation - 複数の Mozilla 製品の mozilla::TrackUnionStream::EndTrack の実装における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0761 2013-02-25 16:01 2013-01-8 Show GitHub Exploit DB Packet Storm
225256 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の CharDistributionAnalysis::HandleOneChar 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0760 2013-02-25 16:00 2013-01-8 Show GitHub Exploit DB Packet Storm
225257 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0757 2013-02-25 15:59 2013-01-8 Show GitHub Exploit DB Packet Storm
225258 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の obj_toSource 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0756 2013-02-25 15:58 2013-01-8 Show GitHub Exploit DB Packet Storm
225259 10 危険 Mozilla Foundation - 複数の Mozilla 製品の Vibrate ライブラリにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0755 2013-02-25 15:57 2013-01-8 Show GitHub Exploit DB Packet Storm
225260 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0752 2013-02-25 15:56 2013-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1901 - - - Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without suf… CWE-22
Path Traversal 		CVE-2026-42888 2026-05-13 00:13 2026-05-12 Show GitHub Exploit DB Packet Storm
1902 5.3 MEDIUM
Network 		uriparser_project uriparser In uriparser before 1.0.2, there is pointer difference truncation to int in various places. CWE-197
 Numeric Truncation Error 		CVE-2026-44927 2026-05-13 00:12 2026-05-8 Show GitHub Exploit DB Packet Storm
1903 9.8 CRITICAL
Network 		- - Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, aseHttpRequestHan… CWE-22
Path Traversal 		CVE-2026-38360 2026-05-13 00:10 2026-05-9 Show GitHub Exploit DB Packet Storm
1904 7.4 HIGH
Local 		- - Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC socket in the world-writable /tmp directo… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-34354 2026-05-13 00:10 2026-05-9 Show GitHub Exploit DB Packet Storm
1905 7.2 HIGH
Network 		- - Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI. CWE-22
Path Traversal 		CVE-2026-41951 2026-05-13 00:10 2026-05-11 Show GitHub Exploit DB Packet Storm
1906 3.3 LOW
Local 		- - The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation fe… CWE-22
Path Traversal 		CVE-2026-41530 2026-05-13 00:10 2026-05-12 Show GitHub Exploit DB Packet Storm
1907 7.4 HIGH
Network 		- - "Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate validation. A man-in-the-middle attack may allow eavesdropping on, or altering, the communication on push notific… CWE-295
Improper Certificate Validation  		CVE-2026-41872 2026-05-13 00:10 2026-05-12 Show GitHub Exploit DB Packet Storm
1908 - - - Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could have been exploited… CWE-1392
 Use of Default Credentials 		CVE-2026-7428 2026-05-13 00:09 2026-05-12 Show GitHub Exploit DB Packet Storm
1909 5.3 MEDIUM
Network 		- - webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentially trustworthy origin such as plain HTTP. The previous fix r… CWE-749
 Exposed Dangerous Method or Function 		CVE-2026-6402 2026-05-13 00:08 2026-05-12 Show GitHub Exploit DB Packet Storm
1910 7.4 HIGH
Network 		- - When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP … CWE-235
 Improper Handling of Extra Parameters 		CVE-2026-27851 2026-05-13 00:08 2026-05-12 Show GitHub Exploit DB Packet Storm