Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3631	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

3632	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3633	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3634	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

3635	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

3636	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

3637	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

3638	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23778	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

3639	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23779	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

3640	4.3	警告 Network	Apache Software Foundation	Apache ActiveMQ ActiveMQ Web ActiveMQ Broker	Apache Software FoundationのApache ActiveMQ等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33227	2026-04-21 10:42	2026-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
611	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are no… Update	CWE-79 Cross-site Scripting	CVE-2022-50966	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

612	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are… Update	CWE-79 Cross-site Scripting	CVE-2022-50967	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

613	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functionality ar… Update	CWE-79 Cross-site Scripting	CVE-2022-50968	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

614	6.1	MEDIUM Network	-	-	uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The date_created, date_from, date_to, and created_at parameters in the filter functi… Update	CWE-79 Cross-site Scripting	CVE-2022-50969	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

615	5.4	MEDIUM Network	-	-	WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can cra… Update	CWE-79 Cross-site Scripting	CVE-2022-50970	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

616	8.6	HIGH Network	-	-	Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs. Spring AI 1.0.x: affected from 1.0.0 through latest 1.0.x; upgra… Update	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2026-41705	2026-05-12 23:20	2026-05-9	Show	GitHub Exploit DB Packet Storm

617	8.0	HIGH Network	-	-	A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links i… New	CWE-78 OS Command	CVE-2026-4802	2026-05-12 23:20	2026-05-11	Show	GitHub Exploit DB Packet Storm

618	8.2	HIGH Network	-	-	In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access New	CWE-306 Missing Authentication for Critical Function	CVE-2026-44413	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

619	5.0	MEDIUM Network	-	-	OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks. Attackers can create stored profiles pointing… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-45000	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm

620	7.1	HIGH Network	-	-	OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trusted settings including sandbox p… New	CWE-862 Missing Authorization	CVE-2026-45001	2026-05-12 23:20	2026-05-12	Show	GitHub Exploit DB Packet Storm