Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236311 7.5 危険 Joomla! - Mambo および Joomla! 用の fq における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0512 2012-09-25 16:59 2008-01-31 Show GitHub Exploit DB Packet Storm
236312 9.3 危険 MPlayer project - MPlayer の libmpdemux/demux_mov.c における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2008-0485 2012-09-25 16:59 2008-02-5 Show GitHub Exploit DB Packet Storm
236313 10 危険 move networks inc - Move Networks Upgrade Manager の QMPUpgrade.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0477 2012-09-25 16:59 2008-01-29 Show GitHub Exploit DB Packet Storm
236314 6.4 警告 Zoho Corporation - ManageEngine Applications Manager における設定を変更される脆弱性 CWE-287
不適切な認証 		CVE-2008-0476 2012-09-25 16:59 2008-01-29 Show GitHub Exploit DB Packet Storm
236315 5 警告 Zoho Corporation - ManageEngine Applications Manager における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0475 2012-09-25 16:59 2008-01-29 Show GitHub Exploit DB Packet Storm
236316 4.3 警告 Zoho Corporation - ManageEngine Applications Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0474 2012-09-25 16:59 2008-01-29 Show GitHub Exploit DB Packet Storm
236317 4.3 警告 マイクロソフト
MediaWiki		 - MediaWiki などにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0460 2012-09-25 16:59 2008-01-24 Show GitHub Exploit DB Packet Storm
236318 6.8 警告 liquidsilvercms - Liquid-Silver CMS の update/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0459 2012-09-25 16:59 2008-01-25 Show GitHub Exploit DB Packet Storm
236319 9.3 危険 マイクロソフト
Skype Technologies S.A.		 - Windows 上の Skype の Internet Explorer Web コントロールにおけるクロスゾーンスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0454 2012-09-25 16:59 2008-01-18 Show GitHub Exploit DB Packet Storm
236320 7.5 危険 pacercms - PacerCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0451 2012-09-25 16:59 2008-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
61 7.3 HIGH
Network 		- - An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, ma… New CWE-787
 Out-of-bounds Write 		CVE-2026-43656 2026-05-13 03:17 2026-05-12 Show GitHub Exploit DB Packet Storm
62 7.3 HIGH
Network 		- - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected s… New CWE-125
Out-of-bounds Read 		CVE-2026-43655 2026-05-13 03:17 2026-05-12 Show GitHub Exploit DB Packet Storm
63 - - - Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21,… New CWE-285
Improper Authorization 		CVE-2026-43515 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
64 - - - Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M… New CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-43514 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
65 - - - Improper Handling of Case Sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 … New CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-43513 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
66 - - - DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… New CWE-592
 DEPRECATED: Authentication Bypass Issues 		CVE-2026-43512 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
67 7.5 HIGH
Network 		- - Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network. New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42899 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
68 9.9 CRITICAL
Network 		- - Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network. New CWE-94
Code Injection 		CVE-2026-42898 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
69 7.8 HIGH
Local 		- - Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. New CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound 		CVE-2026-42896 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm
70 7.4 HIGH
Network 		- - Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to perform tampering over a network. New CWE-77
Command Injection 		CVE-2026-42893 2026-05-13 03:17 2026-05-13 Show GitHub Exploit DB Packet Storm