Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251781 7.5 危険 The Support Incident Tracker Project - Support Incident Tracker の incident_attachments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3831 2012-02-1 16:01 2012-01-29 Show GitHub Exploit DB Packet Storm
251782 4.3 警告 The Support Incident Tracker Project - Support Incident Tracker の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3830 2012-02-1 15:59 2012-01-29 Show GitHub Exploit DB Packet Storm
251783 4 警告 The Support Incident Tracker Project - Support Incident Tracker の ftp_upload_file.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3829 2012-02-1 15:58 2012-01-29 Show GitHub Exploit DB Packet Storm
251784 4 警告 イー・アクセス株式会社 - Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0314 2012-02-1 12:01 2012-02-1 Show GitHub Exploit DB Packet Storm
251785 5.8 警告 OpenNMS - OpenNMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0936 2012-02-1 11:05 2012-01-29 Show GitHub Exploit DB Packet Storm
251786 7.5 危険 Aryadad - Aryadad CMS の Default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0935 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
251787 7.5 危険 Zingiri - WordPress 用 Theme Tuner プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0934 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
251788 2.6 注意 Acidcat - Acidcat CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0933 2012-02-1 11:01 2012-01-29 Show GitHub Exploit DB Packet Storm
251789 5.8 警告 Lead Capture Page System - Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0932 2012-02-1 11:00 2012-01-29 Show GitHub Exploit DB Packet Storm
251790 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2012-0931 2012-02-1 10:08 2012-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4901 6.5 MEDIUM
Network
wazuh wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.0.0 to before version 4.14.4, multiple heap-based out-of-bounds WRITE vulnerabilities exis… CWE-124
CWE-191
Buffer Underflow
 Integer Underflow (Wrap or Wraparound)
CVE-2026-41499 2026-05-1 22:01 2026-04-30 Show GitHub Exploit DB Packet Storm
4902 9.8 CRITICAL
Network
arc53 docsgpt DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a … CWE-77
Command Injection
CVE-2026-26015 2026-05-1 21:56 2026-04-30 Show GitHub Exploit DB Packet Storm
4903 7.5 HIGH
Network
postgresql postgresql_jdbc_driver pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. A maliciou… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-42198 2026-05-1 21:51 2026-04-30 Show GitHub Exploit DB Packet Storm
4904 7.8 HIGH
Local
freebsd freebsd An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers. The bug may be exploitable by… CWE-783
 Operator Precedence Logic Error
CVE-2026-7270 2026-05-1 21:47 2026-04-30 Show GitHub Exploit DB Packet Storm
4905 7.5 HIGH
Network
freebsd freebsd Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affec… CWE-674
CWE-791
 Uncontrolled Recursion
 Incomplete Filtering of Special Elements
CVE-2026-7164 2026-05-1 21:46 2026-04-30 Show GitHub Exploit DB Packet Storm
4906 7.8 HIGH
Local
freebsd freebsd When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)'s file descriptor set size l… CWE-121
Stack-based Buffer Overflow
CVE-2026-39457 2026-05-1 21:41 2026-04-30 Show GitHub Exploit DB Packet Storm
4907 7.5 HIGH
Network
mozilla firefox
thunderbird
Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-7320 2026-05-1 21:32 2026-04-29 Show GitHub Exploit DB Packet Storm
4908 7.3 HIGH
Network
mozilla firefox
thunderbird
Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have… CWE-119
CWE-416
Incorrect Access of Indexable Resource ('Range Error') 
 Use After Free
CVE-2026-7322 2026-05-1 21:30 2026-04-29 Show GitHub Exploit DB Packet Storm
4909 5.4 MEDIUM
Network
helpy.io helpy Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or Jav… CWE-79
Cross-site Scripting
CVE-2026-40230 2026-05-1 21:26 2026-04-30 Show GitHub Exploit DB Packet Storm
4910 5.4 MEDIUM
Network
helpy.io helpy Helpy contains a stored cross-site scripting vulnerability in the post author display logic. Any registered user can persist arbitrary HTML in their account name field and cause it to be rendered une… CWE-79
Cross-site Scripting
CVE-2026-40229 2026-05-1 21:25 2026-04-30 Show GitHub Exploit DB Packet Storm