Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3411	5.5	警告 Local	Igor Arsenin	TaskInfo	Igor ArseninのTaskInfoにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2019-25667	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

3412	8.2	重要 Network	PHP Scripts Mall Pvt Ltd	News Website Script	PhpscriptsmallのNews Website ScriptにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25668	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

3413	7.5	重要 Network	Novell	eDirectory	ARCA SOLUTIONS INC.のeDirectoryにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25675	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

3414	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

3415	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3416	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3417	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3418	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

3419	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

3420	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
701	7.5	HIGH Network	-	-	A Denial of Service (DoS) vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. New	-	CVE-2026-4890	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

702	5.3	MEDIUM Network	-	-	A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet. New	-	CVE-2026-4891	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

703	8.4	HIGH Local	-	-	A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a crafted DHCPv6 packet. New	-	CVE-2026-4892	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

704	5.3	MEDIUM Network	-	-	An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information. New	-	CVE-2026-4893	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

705	-		-	-	A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advanc… New	-	CVE-2026-5172	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

706	-		-	-	An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing le… New	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2026-35227	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

707	-		-	-	A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unau… New	CWE-306 Missing Authentication for Critical Function	CVE-2026-5029	2026-05-12 23:15	2026-05-12	Show	GitHub Exploit DB Packet Storm

708	-		-	-	ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br… New	CWE-79 Cross-site Scripting	CVE-2026-6909	2026-05-12 23:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

709	-		-	-	ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br… New	CWE-79 Cross-site Scripting	CVE-2026-6956	2026-05-12 23:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

710	9.8	CRITICAL Network	cross-crypto	cross-implementation	CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused b… Update	CWE-121 CWE-122 Stack-based Buffer Overflow Heap-based Buffer Overflow	CVE-2026-41509	2026-05-12 23:15	2026-05-8	Show	GitHub Exploit DB Packet Storm