Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247481 4.3 警告 Invensys - Invensys Wonderware Information Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0225 2012-04-4 16:33 2012-04-2 Show GitHub Exploit DB Packet Storm
247482 5 警告 Rockwell Automation - Rockwell Automation Allen-Bradley FactoryTalk および RSLogix 5000 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-0222 2012-04-4 16:32 2012-01-17 Show GitHub Exploit DB Packet Storm
247483 5 警告 Rockwell Automation - Rockwell Automation Allen-Bradley FactoryTalk および RSLogix 5000 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0221 2012-04-4 16:31 2012-01-17 Show GitHub Exploit DB Packet Storm
247484 7.5 危険 シックス・アパート株式会社 - Movable Type におけるデータを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2011-5085 2012-04-4 16:30 2012-04-2 Show GitHub Exploit DB Packet Storm
247485 4.3 警告 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5084 2012-04-4 16:22 2012-04-2 Show GitHub Exploit DB Packet Storm
247486 9.3 危険 Ecava - Ecava IntegraXor の ActiveX コントロールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-0246 2012-04-4 11:52 2012-03-23 Show GitHub Exploit DB Packet Storm
247487 5 警告 PHP Grade Book - PHP Grade Book の admin/index.php におけるデータベースを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-1670 2012-04-4 11:51 2012-03-31 Show GitHub Exploit DB Packet Storm
247488 10 危険 ヒューレット・パッカード - HP Performance Manager における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0127 2012-04-4 11:50 2012-03-27 Show GitHub Exploit DB Packet Storm
247489 7.5 危険 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3065 2012-04-4 11:50 2012-03-28 Show GitHub Exploit DB Packet Storm
247490 10 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3063 2012-04-4 11:48 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
691 7.8 HIGH
Local 		- - libcaca is a colour ASCII art library. In 0.99.beta20 and earlier, an integer overflow vulnerability in libcaca's canvas import functionality allows an attacker to cause a controlled heap out-of-boun… New CWE-122
CWE-190
CWE-787
Heap-based Buffer Overflow
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-42046 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
692 7.3 HIGH
Network 		- - An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function New CWE-94
Code Injection 		CVE-2026-37630 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
693 8.8 HIGH
Network 		- - EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient… New CWE-77
Command Injection 		CVE-2026-36734 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
694 8.1 HIGH
Network 		- - Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptFromCommit function in dist/mcp/s… New CWE-78
OS Command  		CVE-2026-30635 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
695 7.5 HIGH
Network 		- - A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files f… New CWE-22
Path Traversal 		CVE-2026-2614 2026-05-12 23:17 2026-05-12 Show GitHub Exploit DB Packet Storm
696 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45391 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
697 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45392 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
698 - - - Reserved. Details will be published at disclosure. New - CVE-2026-45393 2026-05-12 23:16 2026-05-12 Show GitHub Exploit DB Packet Storm
699 - - - dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-co… New - CVE-2026-2291 2026-05-12 23:15 2026-05-12 Show GitHub Exploit DB Packet Storm
700 - - - Wellbia's XIGNCODE3 xhunter1.sys kernel driver Privilege Escalation Vulnerability provides access to IRP_MJ_REITS command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Cr… New - CVE-2026-3609 2026-05-12 23:15 2026-05-12 Show GitHub Exploit DB Packet Storm