Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
247281 5 警告 Bradford Networks - Bradford Network Sentry のエージェントにおけるワークステーション上で任意のテキストを表示される脆弱性 CWE-287
不適切な認証
CVE-2012-2606 2012-06-14 16:28 2012-06-13 Show GitHub Exploit DB Packet Storm
247282 6.8 警告 Bradford Networks - Bradford Network Sentry の管理インタフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2605 2012-06-14 16:26 2012-06-13 Show GitHub Exploit DB Packet Storm
247283 3.5 注意 Bradford Networks - Bradford Network Sentry の GuestAccess.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2604 2012-06-14 16:24 2012-06-13 Show GitHub Exploit DB Packet Storm
247284 4.3 警告 アドビシステムズ - Adobe ColdFusion のコンポーネントブラウザにおける CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2012-2041 2012-06-14 15:21 2012-06-12 Show GitHub Exploit DB Packet Storm
247285 2.6 注意 MoboTap - Dolphin Browser における WebView クラスに関する脆弱性 CWE-Other
その他
CVE-2012-2635 2012-06-14 12:01 2012-06-14 Show GitHub Exploit DB Packet Storm
247286 9.3 危険 アップル - Apple iTunes におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0677 2012-06-14 11:51 2012-06-12 Show GitHub Exploit DB Packet Storm
247287 7.2 危険 アドビシステムズ - Adobe Flash Player および Adobe AIR のインストーラにおける権限を取得される脆弱性 CWE-Other
その他
CVE-2012-2040 2012-06-13 16:43 2012-06-8 Show GitHub Exploit DB Packet Storm
247288 10 危険 アドビシステムズ - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-2039 2012-06-13 16:42 2012-06-8 Show GitHub Exploit DB Packet Storm
247289 2.6 注意 アドビシステムズ - Flash Player における同一生成元ポリシー実装不備の脆弱性 CWE-Other
その他
CVE-2012-2038 2012-06-13 16:32 2012-06-11 Show GitHub Exploit DB Packet Storm
247290 10 危険 アドビシステムズ - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-2037 2012-06-13 16:30 2012-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
791 7.5 HIGH
Network
mediawiki mediawiki Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Skin/Skin.Php. This issue… Update CWE-200
NVD-CWE-noinfo
Information Exposure
CVE-2026-34092 2026-05-15 01:41 2026-05-12 Show GitHub Exploit DB Packet Storm
792 6.5 MEDIUM
Network
- - ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.101.1 and 16.10.0, an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability on … New CWE-22
Path Traversal
CVE-2026-44440 2026-05-15 01:29 2026-05-14 Show GitHub Exploit DB Packet Storm
793 5.0 MEDIUM
Network
- - ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.106.0 and 16.16.0, a malicious user could send a crafted request to an endpoint, which would lead to the server making… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44441 2026-05-15 01:29 2026-05-14 Show GitHub Exploit DB Packet Storm
794 - - - ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.12.0, an improper restriction of XML external entity (XXE) reference vulnerability in the EDI Module enab… New CWE-611
XXE
CVE-2026-44445 2026-05-15 01:29 2026-05-14 Show GitHub Exploit DB Packet Storm
795 8.8 HIGH
Network
- - ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.104.3 and 16.14.0, some endpoints were vulnerable to SQL injection through specially crafted requests, which would all… New CWE-89
SQL Injection
CVE-2026-44446 2026-05-15 01:29 2026-05-14 Show GitHub Exploit DB Packet Storm
796 8.8 HIGH
Network
- - ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 16.9.0, some endpoints were vulnerable to SQL injection through specially crafted requests, which would allow a malicious… New CWE-89
SQL Injection
CVE-2026-44447 2026-05-15 01:29 2026-05-14 Show GitHub Exploit DB Packet Storm
797 9.8 CRITICAL
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg's /forms/pdfengines/metadata/write HTTP endpoint accepts a JSON metadata object and passes its keys directly to E… New CWE-78
OS Command 
CVE-2026-42589 2026-05-15 01:28 2026-05-15 Show GitHub Exploit DB Packet Storm
798 5.3 MEDIUM
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, FilterOutboundURL resolves the hostname, checks the resolved IPs against the private-address deny-list, and returns only th… New CWE-367
CWE-918
 Time-of-check Time-of-use (TOCTOU) Race Condition
Server-Side Request Forgery (SSRF) 
CVE-2026-42592 2026-05-15 01:28 2026-05-15 Show GitHub Exploit DB Packet Storm
799 5.3 MEDIUM
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, pdfengines/merge, pdfengines/split, libreoffice/convert, chromium/convert/url, chromium/convert/html, and chromium/convert/… New CWE-22
CWE-73
Path Traversal
 External Control of File Name or Path
CVE-2026-42593 2026-05-15 01:28 2026-05-15 Show GitHub Exploit DB Packet Storm
800 8.6 HIGH
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, Gotenberg's Chromium URL-to-PDF endpoint (/forms/chromium/convert/url) has no default protection against HTTP/HTTPS-based S… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42595 2026-05-15 01:28 2026-05-15 Show GitHub Exploit DB Packet Storm