Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
233491	7.1	危険	シスコシステムズ	-	Cisco Catalyst 4500E シリーズスイッチの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4622	2012-09-28 16:02	2012-09-26	Show	GitHub Exploit DB Packet Storm

233492	7.8	危険	シスコシステムズ	-	Cisco IOS のデバイスセンサ機能おけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4621	2012-09-28 15:52	2012-09-26	Show	GitHub Exploit DB Packet Storm

233493	7.8	危険	シスコシステムズ	-	Cisco 10000 シリーズルータ上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4620	2012-09-28 15:51	2012-09-26	Show	GitHub Exploit DB Packet Storm

233494	7.8	危険	シスコシステムズ	-	Cisco IOS の NAT の実装おけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4619	2012-09-28 15:48	2012-09-26	Show	GitHub Exploit DB Packet Storm

233495	7.8	危険	シスコシステムズ	-	Cisco IOS の NAT の実装におけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4618	2012-09-28 15:47	2012-09-26	Show	GitHub Exploit DB Packet Storm

233496	7.1	危険	シスコシステムズ	-	複数の Cisco IOS 製品の BGP の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4617	2012-09-28 15:45	2012-09-26	Show	GitHub Exploit DB Packet Storm

233497	7.1	危険	シスコシステムズ	-	Cisco IOS の Intrusion Prevention System 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-3950	2012-09-28 15:44	2012-09-26	Show	GitHub Exploit DB Packet Storm

233498	7.8	危険	シスコシステムズ	-	複数の Cisco 製品の SIP の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-3949	2012-09-28 15:43	2012-09-26	Show	GitHub Exploit DB Packet Storm

233499	4.3	警告	日本電気 Apache Software Foundation アップルサイバートラスト株式会社ヒューレット・パッカードサン・マイクロシステムズ VMware レッドハット	-	Apache Tomcat におけるサービス運用妨害（DoS）の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0033	2012-09-28 13:37	2009-06-9	Show	GitHub Exploit DB Packet Storm

233500	4.3	警告	日本電気 Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードサン・マイクロシステムズ VMware レッドハット	-	Apache Tomcat における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2008-5515	2012-09-28 13:34	2009-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
751	9.3	CRITICAL Network	-	-	The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including… New	CWE-352 Origin Validation Error	CVE-2025-27851	2026-05-15 02:06	2026-05-14	Show	GitHub Exploit DB Packet Storm

752	5.0	MEDIUM Local	-	-	The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack. This allows an attacker on the local network segment to execute arbitrary Jav… New	CWE-79 Cross-site Scripting	CVE-2025-27852	2026-05-15 02:06	2026-05-14	Show	GitHub Exploit DB Packet Storm

753	7.3	HIGH Network	-	-	The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed. The WDU web site only performs authentication with the client within the client's browser… New	CWE-306 Missing Authentication for Critical Function	CVE-2025-27853	2026-05-15 02:06	2026-05-14	Show	GitHub Exploit DB Packet Storm

754	6.1	MEDIUM Network	-	-	Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS. New	CWE-79 Cross-site Scripting	CVE-2026-24710	2026-05-15 02:06	2026-05-15	Show	GitHub Exploit DB Packet Storm

755	9.6	CRITICAL Network	tanstack	tanstack\/arktype-adapter tanstack\/eslint-plugin-router tanstack\/eslint-plugin-start tanstack\/history tanstack\/nitro-v2-vite-plugin tanstack\/react-router tanstack\/react-router…	On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate … Update	CWE-506 Embedded Malicious Code	CVE-2026-45321	2026-05-15 02:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

756	7.5	HIGH Network	mediawiki	mediawiki	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth. This issue affects OATHAuth: from * before 1.43.7, 1.44.4, 1.45.2. Update	CWE-200 Information Exposure	CVE-2026-34087	2026-05-15 02:02	2026-05-12	Show	GitHub Exploit DB Packet Storm

757	7.5	HIGH Network	-	-	Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing multipart/form-data… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-42561	2026-05-15 02:00	2026-05-14	Show	GitHub Exploit DB Packet Storm

758	-		-	-	PyQuorum is a cryptographic library for secret sharing and key management. Prior to 0.2.1, the mul_mod function implements multiplication via a binary expansion loop whose execution time depends on t… New	CWE-208 Information Exposure Through Timing Discrepancy	CVE-2026-44368	2026-05-15 02:00	2026-05-14	Show	GitHub Exploit DB Packet Storm

759	-		-	-	EcclesiaCRM is CRM Software for church management. In 8.0.0 and earlier, the ValidateInput() function's default case in EcclesiaCRM's query view passes user-supplied POST parameters directly into SQL… New	CWE-89 SQL Injection	CVE-2026-44418	2026-05-15 02:00	2026-05-14	Show	GitHub Exploit DB Packet Storm

760	-		-	-	Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redirect route rule using wildcards rewrite into a cross-host redirect by sliding an extra slash in after… New	CWE-601 Open Redirect	CVE-2026-44372	2026-05-15 01:57	2026-05-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed