Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233971 7.8 危険 マカフィー - McAfee Email などにおける任意のファイルを読み取られる脆弱性 CWE-noinfo
情報不足 		CVE-2009-3339 2012-09-25 17:27 2009-09-24 Show GitHub Exploit DB Packet Storm
233972 7.5 危険 lhacky - Joomla! の Lhacky! Extensions Cave jinc コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3334 2012-09-25 17:27 2009-09-23 Show GitHub Exploit DB Packet Storm
233973 7.5 危険 jforjoomla - Joomla! 用の JReservation コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3316 2012-09-25 17:27 2009-09-23 Show GitHub Exploit DB Packet Storm
233974 7.5 危険 nelogic - NeLogic Nephp Publisher Enterprise の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3315 2012-09-25 17:27 2009-09-23 Show GitHub Exploit DB Packet Storm
233975 2.6 注意 Internet2 - Internet2 Middleware Initiative Shibboleth の IdP におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3300 2012-09-25 17:27 2009-11-6 Show GitHub Exploit DB Packet Storm
233976 4.3 警告 Mahara - Mahara の resume ブロックタイプにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3299 2012-09-25 17:27 2009-10-29 Show GitHub Exploit DB Packet Storm
233977 6.5 警告 Mahara - Mahara におけるサイト管理者のパスワードをリセットされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3298 2012-09-25 17:27 2009-10-29 Show GitHub Exploit DB Packet Storm
233978 5 警告 MIT Kerberos - MIT Kerberos の prep_reprocess_req 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3295 2012-09-25 17:27 2009-12-29 Show GitHub Exploit DB Packet Storm
233979 4.9 警告 Linux - Linux kernel の sg_build_indirect 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-3288 2012-09-25 17:27 2009-09-22 Show GitHub Exploit DB Packet Storm
233980 7.5 危険 macournoyer - Thin Web サーバの lib/thin/connection.rb における IP アドレスをなりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3287 2012-09-25 17:27 2009-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1061 5.5 MEDIUM
Local 		- - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-42050 2026-05-12 05:25 2026-05-12 Show GitHub Exploit DB Packet Storm
1062 6.2 MEDIUM
Local 		- - OpenMcdf is a fully .NET / C# library to manipulate Compound File Binary File Format files, also known as Structured Storage. Prior to version 3.1.3, OpenMcdf does not detect cycles in the directory … New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-41511 2026-05-12 05:25 2026-05-9 Show GitHub Exploit DB Packet Storm
1063 9.8 CRITICAL
Network 		- - RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to c… Update CWE-427
 Uncontrolled Search Path Element 		CVE-2025-69599 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1064 9.8 CRITICAL
Network 		- - 1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess fil… Update CWE-94
Code Injection 		CVE-2025-67887 2026-05-12 05:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1065 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate user queue size constraints Add validation to ensure user queue sizes meet hardware requirements: - Size mus… Update NVD-CWE-noinfo
CVE-2026-43195 2026-05-12 05:21 2026-05-6 Show GitHub Exploit DB Packet Storm
1066 7.5 HIGH
Network 		- - Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host. Update CWE-611
XXE 		CVE-2023-42346 2026-05-12 05:20 2026-05-8 Show GitHub Exploit DB Packet Storm
1067 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ARM processor Error: don't go past allocated memory If the BIOS generates a very small ARM Processor Error, or an inco… Update NVD-CWE-noinfo
CVE-2026-43201 2026-05-12 05:20 2026-05-6 Show GitHub Exploit DB Packet Storm
1068 7.5 HIGH
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query Fix a "scheduling while atomic" bug in mlx5e_ipsec_init_macs(… Update NVD-CWE-noinfo
CVE-2026-43199 2026-05-12 05:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1069 9.8 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done… Update CWE-362
Race Condition 		CVE-2026-43198 2026-05-12 05:12 2026-05-6 Show GitHub Exploit DB Packet Storm
1070 9.1 CRITICAL
Network 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: netconsole: avoid OOB reads, msg is not nul-terminated msg passed to netconsole from the console subsystem is not guaranteed to b… Update CWE-125
Out-of-bounds Read 		CVE-2026-43197 2026-05-12 05:11 2026-05-6 Show GitHub Exploit DB Packet Storm