Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239531 2.1 注意 mirabilis - ICQ の "Answering Service" 関数におけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-5724 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
239532 5.1 警告 middlebury college - Segue CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5722 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
239533 4.3 警告 mirapoint - Mirapoint WebMail におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5712 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
239534 7.2 危険 The PHP Group - PHP における open_basedir 制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2006-5706 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
239535 6.2 警告 ヒューレット・パッカード - HP NonStop Server における任意のファイルを読まれる脆弱性 - CVE-2006-5704 2012-09-25 15:36 2006-10-26 Show GitHub Exploit DB Packet Storm
239536 4.9 警告 Linux
レッドハット		 - Fedora Core 5 などで使用される Linux kernel におけるメモリ二重解放の脆弱性 - CVE-2006-5701 2012-09-25 15:36 2006-11-3 Show GitHub Exploit DB Packet Storm
239537 10 危険 Pentaho Corporation - Pentaho BI Suite における脆弱性 - CVE-2006-5675 2012-09-25 15:36 2006-11-2 Show GitHub Exploit DB Packet Storm
239538 7.5 危険 miniBB - miniBB における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5674 2012-09-25 15:36 2006-11-2 Show GitHub Exploit DB Packet Storm
239539 6.8 警告 miniBB - miniBB の bb_func_txt.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5673 2012-09-25 15:36 2006-11-2 Show GitHub Exploit DB Packet Storm
239540 7.5 危険 mysource cms - MySource CMS の web/init_mysource.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5672 2012-09-25 15:36 2006-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1251 8.0 HIGH
Network 		microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40368 2026-05-14 05:52 2026-05-13 Show GitHub Exploit DB Packet Storm
1252 7.5 HIGH
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected bo… CWE-674
 Uncontrolled Recursion 		CVE-2026-44289 2026-05-14 05:50 2026-05-14 Show GitHub Exploit DB Packet Storm
1253 7.5 HIGH
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.… CWE-674
 Uncontrolled Recursion 		CVE-2026-45740 2026-05-14 05:50 2026-05-14 Show GitHub Exploit DB Packet Storm
1254 8.8 HIGH
Network 		microsoft sharepoint_server Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CWE-502
 Deserialization of Untrusted Data 		CVE-2026-40357 2026-05-14 05:48 2026-05-13 Show GitHub Exploit DB Packet Storm
1255 9.6 CRITICAL
Network 		ivanti xtraction External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to … CWE-73
 External Control of File Name or Path 		CVE-2026-8043 2026-05-14 05:34 2026-05-13 Show GitHub Exploit DB Packet Storm
1256 5.0 MEDIUM
Local 		- - csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories. CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-41051 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1257 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation … CWE-787
 Out-of-bounds Write 		CVE-2026-34684 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1258 7.8 HIGH
Local 		adobe substance_3d_designer Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation … CWE-787
 Out-of-bounds Write 		CVE-2026-34683 2026-05-14 05:16 2026-05-13 Show GitHub Exploit DB Packet Storm
1259 5.9 MEDIUM
Network 		vercel next.js Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fe… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44577 2026-05-14 05:00 2026-05-14 Show GitHub Exploit DB Packet Storm
1260 5.5 MEDIUM
Local 		pengutronix barebox barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir() function fails to validate that directo… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-34962 2026-05-14 04:58 2026-05-12 Show GitHub Exploit DB Packet Storm