Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
247671 6.9 警告 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point の複数の製品における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-2753 2012-06-21 14:17 2012-06-10 Show GitHub Exploit DB Packet Storm
247672 7.6 危険 アドビシステムズ
アップル
ヒューレット・パッカード
OpenSSL Project
VMware
レッドハット		 - OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性 CWE-362
競合状態 		CVE-2010-3864 2012-06-20 17:08 2010-11-16 Show GitHub Exploit DB Packet Storm
247673 9.3 危険 The Document Foundation - LibreOffice に複数の脆弱性 CWE-119
バッファエラー 		CVE-2011-2685  2012-06-20 17:03 2011-06-23 Show GitHub Exploit DB Packet Storm
247674 3.3 注意 Gajim.org - Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-2093 2012-06-20 16:45 2012-04-10 Show GitHub Exploit DB Packet Storm
247675 9.3 危険 マイクロソフト - Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-0141 2012-06-20 16:29 2012-05-8 Show GitHub Exploit DB Packet Storm
247676 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品の nsHTMLSelectElement 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3671 2012-06-20 15:24 2012-06-18 Show GitHub Exploit DB Packet Storm
247677 3.6 注意 MantisBT Group - MantisBT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2692 2012-06-20 15:15 2012-06-2 Show GitHub Exploit DB Packet Storm
247678 7.5 危険 MantisBT Group - MantisBT の mc_issue_note_update 関数における任意の bugnote を編集される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2691 2012-06-20 15:09 2012-06-3 Show GitHub Exploit DB Packet Storm
247679 7.5 危険 PyPam - PyPam の PAMmodule.c 内の PyPAM_conv におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1502 2012-06-20 14:22 2012-06-16 Show GitHub Exploit DB Packet Storm
247680 5 警告 レッドハット - Red Hat Network Satellite におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2012-1145 2012-06-20 13:56 2012-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1611 8.4 HIGH
Local 		- - JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, plugin-shell's run_command wrapped every agent-supplied command in 'sh -c' / 'cmd /C' and passed the full argument… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-43990 2026-05-14 02:00 2026-05-13 Show GitHub Exploit DB Packet Storm
1612 8.4 HIGH
Local 		- - JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, substring-based blocklist in plugin-shell's command-safety check could be bypassed by adversarial argument constru… CWE-78
CWE-184
OS Command 
 Incomplete Blacklist 		CVE-2026-43991 2026-05-14 02:00 2026-05-13 Show GitHub Exploit DB Packet Storm
1613 9.8 CRITICAL
Network 		- - JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, every MCP write tool (send_tokens, execute_contract, instantiate_contract, upload_wasm, ibc_transfer, etc.) accept… CWE-200
CWE-312
CWE-522
CWE-532
Information Exposure
 Cleartext Storage of Sensitive Information
 Insufficiently Protected Credentials
 Inclusion of Sensitive Information in Log Files 		CVE-2026-43992 2026-05-14 02:00 2026-05-13 Show GitHub Exploit DB Packet Storm
1614 8.2 HIGH
Network 		- - JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the WAVS bridge's computeDataVerify called fetch() on agent-supplied URLs without validating scheme, port, or reso… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43993 2026-05-14 02:00 2026-05-13 Show GitHub Exploit DB Packet Storm
1615 5.5 MEDIUM
Local 		jqlang jq jq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure (built programmatically with… CWE-674
 Uncontrolled Recursion 		CVE-2026-40612 2026-05-14 02:00 2026-05-12 Show GitHub Exploit DB Packet Storm
1616 7.5 HIGH
Network 		golang go A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability affects any user using an untrusted module pr… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-42501 2026-05-14 01:59 2026-05-8 Show GitHub Exploit DB Packet Storm
1617 7.5 HIGH
Network 		golang go Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. NVD-CWE-noinfo
CVE-2026-42499 2026-05-14 01:59 2026-05-8 Show GitHub Exploit DB Packet Storm
1618 6.1 MEDIUM
Network 		golang go If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape a… CWE-116
 Improper Encoding or Escaping of Output 		CVE-2026-39826 2026-05-14 01:59 2026-05-8 Show GitHub Exploit DB Packet Storm
1619 5.3 MEDIUM
Network 		golang go ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitize… NVD-CWE-noinfo
CVE-2026-39825 2026-05-14 01:58 2026-05-8 Show GitHub Exploit DB Packet Storm
1620 6.1 MEDIUM
Network 		golang go CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute. If the URL content were to insert ASCII whitespaces around the '=' rune ins… CWE-79
Cross-site Scripting 		CVE-2026-39823 2026-05-14 01:58 2026-05-8 Show GitHub Exploit DB Packet Storm