Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254801 9.3 危険 マイクロソフト - Microsoft Office Word および Office Word Viewe における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1903 2010-09-1 15:17 2010-08-10 Show GitHub Exploit DB Packet Storm
254802 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1902 2010-09-1 15:17 2010-08-10 Show GitHub Exploit DB Packet Storm
254803 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1901 2010-09-1 15:17 2010-08-10 Show GitHub Exploit DB Packet Storm
254804 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1900 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254805 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1898 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254806 6.8 警告 マイクロソフト - Microsoft Windows のカーネルにおける権限を取得される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1889 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254807 6.8 警告 マイクロソフト - Microsoft Windows XP のカーネルにおける権限を取得される脆弱性 CWE-362
競合状態 		CVE-2010-1888 2010-09-1 15:16 2010-08-10 Show GitHub Exploit DB Packet Storm
254808 9.3 危険 マイクロソフト - Microsoft Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0019 2010-09-1 15:15 2010-08-10 Show GitHub Exploit DB Packet Storm
254809 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox の layout/generic/nsObjectFrame.cpp における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2755 2010-09-1 14:54 2010-07-20 Show GitHub Exploit DB Packet Storm
254810 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のローカルプログラムを実行させられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1240 2010-09-1 14:52 2010-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3301 4.3 MEDIUM
Network 		jenkins azure_ad Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks. CWE-601
Open Redirect 		CVE-2026-42525 2026-05-5 23:25 2026-04-29 Show GitHub Exploit DB Packet Storm
3302 8.8 HIGH
Network 		agilonhealth minerva An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modification privileges to escalate their … CWE-285
Improper Authorization 		CVE-2026-5781 2026-05-5 23:24 2026-04-28 Show GitHub Exploit DB Packet Storm
3303 8.1 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'. If this vulnerability is successfully exploited, an authentic… CWE-284
Improper Access Control 		CVE-2026-5780 2026-05-5 23:22 2026-04-28 Show GitHub Exploit DB Packet Storm
3304 5.5 MEDIUM
Local 		canonical pdfunite PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen… CWE-120
Classic Buffer Overflow 		CVE-2018-25306 2026-05-5 23:22 2026-04-30 Show GitHub Exploit DB Packet Storm
3305 8.8 HIGH
Network 		agilonhealth minerva An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint. This allows an authenticated user to modify the inf… CWE-284
Improper Access Control 		CVE-2026-5779 2026-05-5 23:20 2026-04-28 Show GitHub Exploit DB Packet Storm
3306 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24. This issue affects the function get_csrf_whites of the file /cgi/advanced/misc_main.cgi. Such manipulation leads to stack-bas… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow 		CVE-2026-7834 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
3307 - - - In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message. CWE-125
Out-of-bounds Read 		CVE-2026-6918 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
3308 7.5 HIGH
Network 		- - The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficient escaping on the user supplied … CWE-89
SQL Injection 		CVE-2026-4304 2026-05-5 23:16 2026-05-5 Show GitHub Exploit DB Packet Storm
3309 4.4 MEDIUM
Local 		mercurycom mipc252w_firmware A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-35901 2026-05-5 22:41 2026-04-28 Show GitHub Exploit DB Packet Storm
3310 6.2 MEDIUM
Local 		mercurycom mipc252w_firmware The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication attempts. By repeatedly sending RTSP requests with invalid authentication paramete… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-35902 2026-05-5 22:40 2026-04-28 Show GitHub Exploit DB Packet Storm