Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238721 6.8 警告 Webmin Project - Webmin の file/show.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4893 2012-09-13 14:30 2012-09-11 Show GitHub Exploit DB Packet Storm
238722 2.6 注意 サイボウズ - KUNAI Browser for Remote Service β における WebView クラスに関する脆弱性 CWE-Other
その他 		CVE-2012-4013 2012-09-13 12:02 2012-09-13 Show GitHub Exploit DB Packet Storm
238723 10 危険 FFmpeg - FFmpeg の libavcodec/indeo3.c における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2804 2012-09-13 11:01 2012-05-25 Show GitHub Exploit DB Packet Storm
238724 10 危険 FFmpeg - FFmpeg の libavcodec/mpeg12.c 内の mpeg_decode_frame 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2803 2012-09-13 11:00 2012-05-25 Show GitHub Exploit DB Packet Storm
238725 10 危険 FFmpeg - FFmpeg の libavcodec/ac3dec.c 内の ac3_decode_frame 関数における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2802 2012-09-13 11:00 2012-05-25 Show GitHub Exploit DB Packet Storm
238726 10 危険 FFmpeg - FFmpeg の libavcodec/avs.c における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2801 2012-09-13 10:59 2012-05-25 Show GitHub Exploit DB Packet Storm
238727 10 危険 FFmpeg - FFmpeg の libavcodec/ivi_common.c 内の ff_ivi_process_empty_tile 関数における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2800 2012-09-13 10:59 2012-05-25 Show GitHub Exploit DB Packet Storm
238728 10 危険 FFmpeg - FFmpeg の libavcodec/wmalosslessdec.c における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2799 2012-09-13 10:58 2012-05-25 Show GitHub Exploit DB Packet Storm
238729 10 危険 FFmpeg - FFmpeg の libavcodec/dfa.c 内の decode_dds1 関数における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2798 2012-09-13 10:57 2012-05-25 Show GitHub Exploit DB Packet Storm
238730 10 危険 FFmpeg - FFmpeg の libavcodec/mpegaudiodec.c 内の decode_frame_mp3on4 関数における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2797 2012-09-13 10:55 2012-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1001 6.5 MEDIUM
Network 		- - SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the data function in BuildHelper.php. Update CWE-89
SQL Injection 		CVE-2026-42474 2026-05-6 04:39 2026-05-2 Show GitHub Exploit DB Packet Storm
1002 7.5 HIGH
Network 		- - An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field Update CWE-805
 Buffer Access with Incorrect Length Value 		CVE-2025-63547 2026-05-6 04:39 2026-05-2 Show GitHub Exploit DB Packet Storm
1003 7.5 HIGH
Network 		- - An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field. Update CWE-241
 Improper Handling of Unexpected Data Type 		CVE-2025-63548 2026-05-6 04:39 2026-05-2 Show GitHub Exploit DB Packet Storm
1004 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion when WebSocket permessage-deflate compressio… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-39804 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
1005 - - - Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':get_content_length/1 in lib/b… Update CWE-444
HTTP Request Smuggling 		CVE-2026-39805 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
1006 - - - Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections. 'Elixir.Bandit.Pipeline':determine_… Update CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-39807 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
1007 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The fragment reassembly path in 'Elixir.Ba… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42786 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
1008 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated memory exhaustion via oversized HTTP/2 frames. 'Elixir.Bandit.HTTP2.Frame':deserialize/2 i… Update CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42788 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
1009 - - - 3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to execute arbitrary shell commands in the context of the root user by providing paylo… Update CWE-78
OS Command  		CVE-2025-13605 2026-05-6 04:35 2026-05-5 Show GitHub Exploit DB Packet Storm
1010 9.1 CRITICAL
Network 		- - Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and… Update CWE-125
Out-of-bounds Read 		CVE-2026-7482 2026-05-6 04:35 2026-05-4 Show GitHub Exploit DB Packet Storm