Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251291 7.5 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2011-3953 2012-02-13 10:34 2012-02-8 Show GitHub Exploit DB Packet Storm
251292 4.3 警告 EPiServer - EPiServer CMS の 管理インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1034 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251293 6 警告 EPiServer - EPiServer CMS における WebAdmins のアクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-1031 2012-02-10 15:04 2012-02-8 Show GitHub Exploit DB Packet Storm
251294 5 警告 OfficeSIP Communications - OfficeSIP Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1008 2012-02-10 15:03 2012-02-8 Show GitHub Exploit DB Packet Storm
251295 2.1 注意 Foswiki - Foswiki の UI/Register.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1004 2012-02-10 15:02 2012-02-8 Show GitHub Exploit DB Packet Storm
251296 10 危険 Zakon Group - OpenConf における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1002 2012-02-10 15:01 2012-02-2 Show GitHub Exploit DB Packet Storm
251297 7.5 危険 Tube Ace - Tube Ace の mobile/search/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1029 2012-02-10 15:00 2012-02-8 Show GitHub Exploit DB Packet Storm
251298 4.3 警告 Simple Groupware Solutions - SimpleGroupware の bin/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1028 2012-02-10 14:59 2012-02-2 Show GitHub Exploit DB Packet Storm
251299 7.5 危険 Johannes Ekberg - XRay CMS の login2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1026 2012-02-10 14:15 2012-02-8 Show GitHub Exploit DB Packet Storm
251300 5 警告 Dream Property GmbH - Enigma2 Webinterface のファイルにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1025 2012-02-10 14:01 2012-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4041 6.3 MEDIUM
Network
- - A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Review Tool. Executing a… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7629 2026-05-6 05:16 2026-05-2 Show GitHub Exploit DB Packet Storm
4042 6.3 MEDIUM
Network
- - A vulnerability was determined in JeecgBoot up to 3.9.1. Affected by this issue is the function checkPathTraversalBatch of the file FileDownloadUtils.jav of the component LoadFile Endpoint. This mani… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7603 2026-05-6 05:16 2026-05-2 Show GitHub Exploit DB Packet Storm
4043 6.3 MEDIUM
Network
- - A vulnerability was found in mem0ai mem0 up to 1.0.11. This affects the function pickle.load/pickle.dump of the file mem0/vector_stores/faiss.py. Performing a manipulation results in deserialization.… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data
CVE-2026-7597 2026-05-6 05:16 2026-05-2 Show GitHub Exploit DB Packet Storm
4044 8.1 HIGH
Network
- - School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-7491 2026-05-6 05:16 2026-05-2 Show GitHub Exploit DB Packet Storm
4045 8.8 HIGH
Network
- - CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents. CWE-89
SQL Injection
CVE-2026-7489 2026-05-6 05:14 2026-05-2 Show GitHub Exploit DB Packet Storm
4046 7.2 HIGH
Network
- - CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-7490 2026-05-6 05:14 2026-05-2 Show GitHub Exploit DB Packet Storm
4047 - - - Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2026-6499 2026-05-6 05:14 2026-05-4 Show GitHub Exploit DB Packet Storm
4048 - - - Plaintext storage of a password vulnerability in ILM Informatique OpenConcerto allows Retrieve Embedded Sensitive Data. This issue affects OpenConcerto: 1.7.5. CWE-256
Plaintext Storage of a Password 
CVE-2026-6500 2026-05-6 05:14 2026-05-5 Show GitHub Exploit DB Packet Storm
4049 - - - Improper restriction of XML external entity reference vulnerability in ILM Informatique jOpenDocument allows Data Serialization External Entities Blowup. This issue affects jOpenDocument: 1.5. CWE-611
XXE
CVE-2026-6501 2026-05-6 05:14 2026-05-5 Show GitHub Exploit DB Packet Storm
4050 8.8 HIGH
Adjacent
google android In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as… CWE-303
 Incorrect Implementation of Authentication Algorithm
CVE-2026-0073 2026-05-6 04:54 2026-05-5 Show GitHub Exploit DB Packet Storm