Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247511 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるバッファオーバフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0658 2012-05-17 17:46 2012-05-11 Show GitHub Exploit DB Packet Storm
247512 7.5 危険 アップル - Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3460 2012-05-17 17:42 2012-02-2 Show GitHub Exploit DB Packet Storm
247513 6.8 警告 アップル - Apple Mac OS X の QuickTime における一つずれエラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3459 2012-05-17 17:41 2012-02-2 Show GitHub Exploit DB Packet Storm
247514 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3458 2012-05-17 17:39 2012-02-2 Show GitHub Exploit DB Packet Storm
247515 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0669 2012-05-17 16:00 2012-05-16 Show GitHub Exploit DB Packet Storm
247516 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0667 2012-05-17 15:58 2012-05-16 Show GitHub Exploit DB Packet Storm
247517 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime のプラグインにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0666 2012-05-17 15:56 2012-05-16 Show GitHub Exploit DB Packet Storm
247518 9.3 危険 アップル - Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0665 2012-05-17 15:54 2012-05-16 Show GitHub Exploit DB Packet Storm
247519 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0664 2012-05-17 15:52 2012-05-16 Show GitHub Exploit DB Packet Storm
247520 9.3 危険 アップル - Windows 上で稼働する Apple QuickTime におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0663 2012-05-17 15:51 2012-05-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
951 7.5 HIGH
Network 		- - Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend uses etree.parse() to parse XML files without disabling entity resolution. An attacker can craf… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-31247 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm
952 7.5 HIGH
Network 		- - Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring() without disabli… Update CWE-776
XML Entity Expansion 		CVE-2026-31248 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm
953 - - - The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method. When a user provides a dataset file path to the predict() method, the framework auto… New - CVE-2026-31237 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
954 - - - The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component. When starting a model server with the ludwig serve command, the framework loads mo… New - CVE-2026-31238 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
955 - - - The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pretrained() method u… New - CVE-2026-31239 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
956 - - - The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints. Critical functions such as updating memory records (PUT /memories/{memory_id}) are expos… New - CVE-2026-31240 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
957 9.8 CRITICAL
Network 		- - Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version). If a remote attacker sends a specially crafted request to the product's… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-32661 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
958 7.8 HIGH
Local 		- - Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer,… New CWE-427
 Uncontrolled Search Path Element 		CVE-2026-44612 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
959 6.5 MEDIUM
Network 		- - ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of… New CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2026-25107 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm
960 7.2 HIGH
Network 		- - ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary … New CWE-78
OS Command  		CVE-2026-35506 2026-05-14 00:47 2026-05-13 Show GitHub Exploit DB Packet Storm