Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 12:02 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3721	7.8	重要 Local	Lenovo	PCManager	LenovoのPCManagerにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-2502	2026-02-4 18:38	2025-05-30	Show	GitHub Exploit DB Packet Storm

3722	7.1	重要 Local	Lenovo	PCManager	LenovoのPCManagerにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-2503	2026-02-4 18:38	2025-05-30	Show	GitHub Exploit DB Packet Storm

3723	7.8	重要 Local	NVIDIA	NVIDIA Nsight Graphics	NVIDIAのNVIDIA Nsight GraphicsにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-33206	2026-02-4 18:38	2026-01-14	Show	GitHub Exploit DB Packet Storm

3724	7.3	重要 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-33228	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

3725	7.3	重要 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-33229	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

3726	7.3	重要 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-33230	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

3727	6.7	警告 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-33231	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

3728	4.9	警告 Network	ブロケードコミュニケーションズシステムズ株式会社	fabric operating system	ブロケードコミュニケーションズシステムズ株式会社のfabric operating systemにおける例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-4663	2026-02-4 18:38	2025-07-8	Show	GitHub Exploit DB Packet Storm

3729	6.5	警告 Network	GLPI-PROJECT.ORG	GLPI	GLPI-PROJECT.ORGのGLPIにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-59935	2026-02-4 18:38	2025-12-16	Show	GitHub Exploit DB Packet Storm

3730	3.5	低 Network	マイクロソフト	Microsoft Edge	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2025-62224	2026-02-4 18:38	2026-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
141	-		-	-	Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function New	-	CVE-2026-36906	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

142	-		-	-	Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. New	CWE-79 Cross-site Scripting	CVE-2026-34089	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

143	8.6	HIGH Network	-	-	In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded an… New	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-33362	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

144	7.5	HIGH Network	-	-	In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversi… New	CWE-326 Inadequate Encryption Strength	CVE-2026-33361	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

145	7.5	HIGH Network	-	-	In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforce… New	CWE-862 Missing Authorization	CVE-2026-33359	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

146	7.5	HIGH Network	-	-	In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearic… New	CWE-862 Missing Authorization	CVE-2026-33357	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

147	7.7	HIGH Network	-	-	In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. … New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-33356	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

148	-		-	-	The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script. The script registers the Python … New	-	CVE-2026-31254	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

149	-		-	-	The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechani… New	-	CVE-2026-31253	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

150	-		-	-	CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component. The framework uses torch.load(… New	-	CVE-2026-31252	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm