Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251911 4.4 警告 Todd C. Miller
レッドハット		 - sudo の check.c における認証要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0010 2011-05-31 11:41 2011-01-18 Show GitHub Exploit DB Packet Storm
251912 - - SmarterTools Inc. - SmarterTools 製ウェブサーバに複数の脆弱性 - - 2011-05-31 11:40 2011-05-19 Show GitHub Exploit DB Packet Storm
251913 - - OpenSSL Project - OpenSSL における ECDSA 秘密鍵が漏えいしてしまう問題 - - 2011-05-31 11:23 2011-05-18 Show GitHub Exploit DB Packet Storm
251914 4.3 警告 Apache Software Foundation - Apache Tomcat におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1582 2011-05-31 11:19 2011-05-8 Show GitHub Exploit DB Packet Storm
251915 4.3 警告 CA Technologies - CA eHealth におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1899 2011-05-31 11:16 2011-05-10 Show GitHub Exploit DB Packet Storm
251916 4.3 警告 ISC, Inc. - ISC BIND におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1907 2011-05-31 11:09 2011-05-5 Show GitHub Exploit DB Packet Storm
251917 7.8 危険 日本電気
ヤマハ		 - ヤマハルーターシリーズにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-1323 2011-05-31 10:37 2011-04-20 Show GitHub Exploit DB Packet Storm
251918 4 警告 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4634 2011-05-31 10:35 2008-10-17 Show GitHub Exploit DB Packet Storm
251919 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (XML データ破損) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0612 2011-05-27 11:19 2011-05-12 Show GitHub Exploit DB Packet Storm
251920 9.3 危険 アドビシステムズ - Windows 上で稼働する Adobe Audition におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0615 2011-05-27 10:50 2011-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3641 6.5 MEDIUM
Network 		- - The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all ve… CWE-94
Code Injection 		CVE-2026-3309 2026-04-25 03:13 2026-04-4 Show GitHub Exploit DB Packet Storm
3642 8.8 HIGH
Network 		- - The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4.16. This is due to a missing file name/path validation against path traversal … CWE-22
Path Traversal 		CVE-2026-3666 2026-04-25 03:13 2026-04-4 Show GitHub Exploit DB Packet Storm
3643 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in MoussaabBadla code-screenshot-mcp up to 0.1.0. This affects an unknown part of the component HTTP Interface. Such manipulation leads to os command inject… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-5528 2026-04-25 03:13 2026-04-5 Show GitHub Exploit DB Packet Storm
3644 4.3 MEDIUM
Network 		- - A vulnerability was detected in Dromara lamp-cloud up to 5.8.1. This vulnerability affects the function pageUser of the file /defUser/pageUser of the component DefUserController. Performing a manipul… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-5529 2026-04-25 03:13 2026-04-5 Show GitHub Exploit DB Packet Storm
3645 6.3 MEDIUM
Network 		- - A flaw has been found in Ollama up to 18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-5530 2026-04-25 03:13 2026-04-5 Show GitHub Exploit DB Packet Storm
3646 5.3 MEDIUM
Network 		- - A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. Th… CWE-312
CWE-313
 Cleartext Storage of Sensitive Information
 Cleartext Storage in a File or on Disk 		CVE-2026-5531 2026-04-25 03:13 2026-04-5 Show GitHub Exploit DB Packet Storm
3647 7.3 HIGH
Network 		- - A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5198 2026-04-25 03:12 2026-03-31 Show GitHub Exploit DB Packet Storm
3648 4.7 MEDIUM
Network 		- - A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function _copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserG… CWE-22
Path Traversal 		CVE-2026-5203 2026-04-25 03:12 2026-04-1 Show GitHub Exploit DB Packet Storm
3649 6.3 MEDIUM
Network 		- - A vulnerability was identified in chatwoot up to 4.11.2. Affected by this vulnerability is the function Webhooks::Trigger in the library lib/webhooks/trigger.rb of the component Webhook API. Such man… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-5205 2026-04-25 03:12 2026-04-1 Show GitHub Exploit DB Packet Storm
3650 6.3 MEDIUM
Network 		- - A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argumen… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5206 2026-04-25 03:12 2026-04-1 Show GitHub Exploit DB Packet Storm