Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250421 7.5 危険 phpMyFAQ - phpMyFAQ における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4558 2012-03-27 18:42 2010-12-17 Show GitHub Exploit DB Packet Storm
250422 9.3 危険 SAP - SAP NetWeaver Business Client の sapwdpcd.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4556 2012-03-27 18:42 2010-12-17 Show GitHub Exploit DB Packet Storm
250423 5 警告 IBM - IBM Lotus Notes Traveler の Domino API におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4553 2012-03-27 18:42 2009-10-19 Show GitHub Exploit DB Packet Storm
250424 6.8 警告 crawltrack - CrawlTrack における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-4537 2012-03-27 18:42 2011-01-13 Show GitHub Exploit DB Packet Storm
250425 4.4 警告 MUSCLE - PCSC-Lite の ATRDecodeAtr 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4531 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
250426 4.4 警告 MUSCLE - PCSC-Lite などの製品で使用される USB CCID ドライバの libccid における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2010-4530 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
250427 2.1 注意 Linux - Linux kernel の irda_getsockopt 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4529 2012-03-27 18:42 2011-01-13 Show GitHub Exploit DB Packet Storm
250428 4.3 警告 mhonarc - MHonArc の lib/mhtxthtml.pl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4524 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
250429 7.2 危険 OpenSC team - OpenSC の libopensc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4523 2012-03-27 18:42 2011-01-7 Show GitHub Exploit DB Packet Storm
250430 4 警告 IBM - IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-4551 2012-03-27 18:42 2010-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3021 5.3 MEDIUM
Network 		- - The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts. The discovery of valid use… CWE-204
 Response Discrepancy Information Exposure 		CVE-2024-0391 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3022 7.3 HIGH
Network 		- - Due to a lack of user account state validation during authentication, locked user accounts can be successfully authenticated using Magic Link or Pass Key methods. This bypasses the intended security … CWE-863
 Incorrect Authorization 		CVE-2025-10908 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3023 5.3 MEDIUM
Network 		- - In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to be injected into HTTP responses… CWE-74
Injection 		CVE-2025-8154 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3024 6.3 MEDIUM
Network 		- - The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended permission checks. This… CWE-281
 Improper Preservation of Permissions 		CVE-2025-8325 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3025 8.6 HIGH
Network 		- - The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth. This vulnerabilit… CWE-400
 Uncontrolled Resource Consumption 		CVE-2025-10470 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3026 6.4 MEDIUM
Adjacent 		- - Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be triggered on unintended organizations.… CWE-284
CWE-863
Improper Access Control
 Incorrect Authorization 		CVE-2025-9973 2026-05-14 00:25 2026-05-11 Show GitHub Exploit DB Packet Storm
3027 6.1 MEDIUM
Local 		- - Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue stack. Because the d… CWE-674
 Uncontrolled Recursion 		CVE-2026-1681 2026-05-14 00:25 2026-05-12 Show GitHub Exploit DB Packet Storm
3028 8.3 HIGH
Network 		- - Plainpad is a self hosted note taking app. Prior to version 1.1.1, Plainpad allows a low-privilege authenticated user to self-escalate to administrator by submitting admin=true in PUT /api.php/v1/use… CWE-269
 Improper Privilege Management 		CVE-2026-42562 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
3029 - - - Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escal… CWE-863
 Incorrect Authorization 		CVE-2026-42571 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm
3030 7.5 HIGH
Network 		- - apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target poi… CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2026-42574 2026-05-14 00:23 2026-05-10 Show GitHub Exploit DB Packet Storm