Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4271 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-34540 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4272 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-34541 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4273 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34542 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4274 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算 		CVE-2026-34546 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4275 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける未定義、未指定、または実装定義の動作への依存に関する脆弱性 CWE-758
未定義、未指定、または実装定義の動作への依存 		CVE-2026-34547 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4276 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り 		CVE-2026-34548 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4277 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける未定義、未指定、または実装定義の動作への依存に関する脆弱性 CWE-758
未定義、未指定、または実装定義の動作への依存 		CVE-2026-34549 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4278 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り 		CVE-2026-34550 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4279 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-34551 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4280 5.5 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-34552 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
71 6.4 MEDIUM
Network 		- - Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized input to the Bar Message field. Att… New CWE-79
Cross-site Scripting 		CVE-2021-47957 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
72 8.2 HIGH
Network 		- - EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers… New CWE-89
SQL Injection 		CVE-2021-47956 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
73 5.4 MEDIUM
Network 		- - CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files through the file upload functionality… New CWE-79
Cross-site Scripting 		CVE-2021-47955 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
74 8.2 HIGH
Network 		- - LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter. Attackers can send… New CWE-89
SQL Injection 		CVE-2021-47954 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
75 9.8 CRITICAL
Network 		- - python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. … New CWE-94
Code Injection 		CVE-2021-47952 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
76 7.5 HIGH
Network 		- - Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoi… New CWE-22
Path Traversal 		CVE-2021-47942 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
77 5.3 MEDIUM
Network 		- - MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user profile fields like Location and … New CWE-79
Cross-site Scripting 		CVE-2021-47934 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
78 7.8 HIGH
Local 		- - Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers … New CWE-428
 Unquoted Search Path or Element 		CVE-2020-37247 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
79 6.2 MEDIUM
Local 		- - Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the download path parameter. Attackers ca… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2020-37246 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm
80 7.5 HIGH
Network 		- - Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by injecting directory traversal sequ… New CWE-79
Cross-site Scripting 		CVE-2020-37245 2026-05-17 01:16 2026-05-17 Show GitHub Exploit DB Packet Storm