Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3651 8.4 重要
Local 		Kiso Innovations Technology Co.,Ltd KS-WR3600 Firmware Kiso Innovations Technology Co.,LtdのKS-WR3600 Firmwareにおける複数の脆弱性 CWE-284
CWE-306
CWE-521
CVE-2025-68716 2026-02-4 18:41 2026-01-8 Show GitHub Exploit DB Packet Storm
3652 9.4 緊急
Network 		Kiso Innovations Technology Co.,Ltd KS-WR3600 Firmware Kiso Innovations Technology Co.,LtdのKS-WR3600 Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-68717 2026-02-4 18:41 2026-01-8 Show GitHub Exploit DB Packet Storm
3653 5.4 警告
Adjacent 		Kiso Innovations Technology Co.,Ltd KS-WR1200 Firmware Kiso Innovations Technology Co.,LtdのKS-WR1200 Firmwareにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-68718 2026-02-4 18:41 2026-01-8 Show GitHub Exploit DB Packet Storm
3654 8.8 重要
Network 		Kiso Innovations Technology Co.,Ltd KS-WR3600 Firmware Kiso Innovations Technology Co.,LtdのKS-WR3600 Firmwareにおける複数の脆弱性 CWE-200
CWE-552
CVE-2025-68719 2026-02-4 18:41 2026-01-8 Show GitHub Exploit DB Packet Storm
3655 6.1 警告
Network 		FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2025-69285 2026-02-4 18:41 2026-01-21 Show GitHub Exploit DB Packet Storm
3656 6 警告
Local 		Beam beta9 Beamのbeta9におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-69820 2026-02-4 18:41 2026-01-22 Show GitHub Exploit DB Packet Storm
3657 7.4 重要
Adjacent 		beatXP Vega Smartwatch Firmware beatXPのVega Smartwatch Firmwareにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2025-69821 2026-02-4 18:41 2026-01-22 Show GitHub Exploit DB Packet Storm
3658 7.4 重要
Adjacent 		Atomberg Atomberg Erica Smart Fan Firmware AtombergのAtomberg Erica Smart Fan Firmwareにおける複数の脆弱性 CWE-200
CWE-284
CWE-287
CWE-294
CVE-2025-69822 2026-02-4 18:41 2026-01-22 Show GitHub Exploit DB Packet Storm
3659 9.8 緊急
Network 		bell labs plan 9 9fansのPlan 9における複数の脆弱性 CWE-119
CWE-122
CVE-2025-7208 2026-02-4 18:41 2025-07-9 Show GitHub Exploit DB Packet Storm
3660 5.5 警告
Local 		bell labs plan 9 9fansのPlan 9における複数の脆弱性 CWE-404
CWE-476
CWE-476
CVE-2025-7209 2026-02-4 18:41 2025-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 - - - Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit chara… New CWE-1289
 Improper Validation of Unsafe Equivalence in Input 		CVE-2026-45190 2026-05-11 06:16 2026-05-11 Show GitHub Exploit DB Packet Storm
412 - - - Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids. If the communication channel to the statsd daemon is not secured (for example, by sending UDP packets to a host on ano… New CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2026-45180 2026-05-11 06:16 2026-05-11 Show GitHub Exploit DB Packet Storm
413 4.7 MEDIUM
Network 		oracle macoron Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects. The supported versions that is affected is v0.22.0. Easily exploitable vulnerability allows unauthenticated attacker w… Update CWE-601
CWE-346
Open Redirect
 Origin Validation Error 		CVE-2026-35253 2026-05-11 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
414 6.5 MEDIUM
Local 		- - Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used. New CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2026-45184 2026-05-11 03:16 2026-05-10 Show GitHub Exploit DB Packet Storm
415 6.5 MEDIUM
Network 		- - Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive allows Cross Site Request Forgery. This issue affects DivvyDrive: from 4.8.2.9 before 4.8.3.2. Update CWE-352
 Origin Validation Error 		CVE-2026-5791 2026-05-11 01:16 2026-05-7 Show GitHub Exploit DB Packet Storm
416 8.8 HIGH
Network 		apache cloudstack Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an… Update CWE-94
Code Injection 		CVE-2026-25077 2026-05-11 00:16 2026-05-8 Show GitHub Exploit DB Packet Storm
417 8.1 HIGH
Network 		- - The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0. Anyone with authenticated user-account access in CloudStack 4.21.0.0+ environments, where this plugin is e… Update CWE-359
 Exposure of Private Personal Information to an Unauthorized Actor 		CVE-2025-66172 2026-05-11 00:16 2026-05-8 Show GitHub Exploit DB Packet Storm
418 4.3 MEDIUM
Network 		google chrome Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security sev… Update NVD-CWE-noinfo
CWE-20
 Improper Input Validation  		CVE-2026-7915 2026-05-10 23:16 2026-05-7 Show GitHub Exploit DB Packet Storm
419 8.8 HIGH
Network 		google chrome Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Hi… Update CWE-787
CWE-125
 Out-of-bounds Write
Out-of-bounds Read 		CVE-2026-7902 2026-05-10 23:16 2026-05-7 Show GitHub Exploit DB Packet Storm
420 5.4 MEDIUM
Network 		- - WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can cra… New CWE-79
Cross-site Scripting 		CVE-2022-50970 2026-05-10 22:16 2026-05-10 Show GitHub Exploit DB Packet Storm