Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4661	9.1	緊急 Network	WSO2	Identity Server as Key Manager WSO2 API Manager WSO2 Identity Server WSO2 Open Banking AM WSO2 Open Banking IAM	WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-2374	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

4662	5.4	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4867	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4663	7.5	重要 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-8010	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4664	5.4	警告 Network	WSO2	WSO2 Identity Server	WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-12624	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4665	8.2	重要 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2025-31958	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

4666	5.3	警告 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-31981	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

4667	6.1	警告 Network	WSO2	WSO2 API Manager WSO2 Identity Server	WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-6024	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4668	6.5	警告 Network	フォーティネット	FortiOS FortiPAM FortiProxy FortiSwitch Manager	フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-61624	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

4669	5.4	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-61886	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

4670	5.3	警告 Network	Apache Software Foundation	Apache Doris-MCP-Server	Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-66335	2026-04-24 11:34	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211	4.3	MEDIUM Network	-	-	nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. In versions 1.3.0 and prior, network-libp2p discovery accepts signed PeerContact updates from untrusted peers and s…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-40094	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

212	9.1	CRITICAL Network	-	-	Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2026-47372	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

213	-		-	-	A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the …	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-9136	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

214	-		-	-	The CSP report endpoint intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reachable by untrusted clients,…	CWE-400 Uncontrolled Resource Consumption	CVE-2026-9137	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

215	-		-	-	The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerabil…	CWE-522 Insufficiently Protected Credentials	CVE-2026-0393	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

216	-		-	-	Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary Jav…	CWE-79 Cross-site Scripting	CVE-2026-6841	2026-05-22 01:04	2026-05-21	Show	GitHub Exploit DB Packet Storm

217	4.8	MEDIUM Network	-	-	Incorrect Behaviour of Views with TCP PROXY Requests	CWE-284 Improper Access Control	CVE-2026-41999	2026-05-22 00:27	2026-05-21	Show	GitHub Exploit DB Packet Storm

218	6.8	MEDIUM Network	-	-	Insufficient Validation of Names During AXFR	CWE-77 Command Injection	CVE-2026-42000	2026-05-22 00:27	2026-05-21	Show	GitHub Exploit DB Packet Storm

219	7.5	HIGH Network	-	-	Insufficient Validation of Autoprimary SOA Queries	CWE-400 Uncontrolled Resource Consumption	CVE-2026-42001	2026-05-22 00:27	2026-05-21	Show	GitHub Exploit DB Packet Storm

220	5.9	MEDIUM Network	-	-	Concurrency and locking defects in GSS-TSIG	CWE-364 Signal Handler Race Condition	CVE-2026-42002	2026-05-22 00:27	2026-05-21	Show	GitHub Exploit DB Packet Storm