Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
61	7.3	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるコードインジェクションの脆弱性 New	CWE-94 コード・インジェクション	CVE-2024-46507	2026-05-11 11:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

62	7.5	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるハードコードされた認証情報の使用に関する脆弱性 New	CWE-798 ハードコードされた認証情報の使用	CVE-2024-46508	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

63	9.8	緊急 Network	Frappe	ERPNext	FrappeのERPNextにおけるコードインジェクションの脆弱性 New	CWE-94 コード・インジェクション	CVE-2026-38431	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

64	6.1	警告 Network	Frappe	ERPNext	FrappeのERPNextにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-38432	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

65	9.1	緊急 Network	CHORNY	Apache::Session	CHORNYのApache::Sessionにおける有効期限後または解放後のリソースの操作に関する脆弱性 New	CWE-672 有効期限後または解放後のリソースの操作	CVE-2013-10075	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

66	9.8	緊急 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおける複数の脆弱性 New	CWE-502 CWE-918	CVE-2026-34084	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

67	5.4	警告 Network	PHPOffice	PhpSpreadsheet	PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性 New	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35453	2026-05-11 11:12	2026-05-5	Show	GitHub Exploit DB Packet Storm

68	9.1	緊急 Network	Zcash Foundation	Zebra-script Zebrad	Zcash FoundationのZebra-script等の複数製品における呼び出し元による仕様の不適切な準拠に関する脆弱性 New	CWE-573 呼び出し元による仕様の不適切な準拠	CVE-2026-41583	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

69	6.5	警告 Network	Zcash Foundation	zebra-rpc Zebrad	Zcash Foundationのzebra-rpc等の複数製品における複数の脆弱性 New	CWE-248 CWE-617	CVE-2026-41585	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

70	9.1	緊急 Network	Zcash Foundation	Zebra-script Zebrad	Zcash FoundationのZebra-script等の複数製品におけるデジタル署名の検証に関する脆弱性 New	CWE-347 デジタル署名の不適切な検証	CVE-2026-44497	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347291	-	andreas_schwarzkopf	accessibility_glossary	A fix for this vulnerability was included in 0.4.11. The latest release can be downloaded at: http://typo3.org/extensions/repository/view/a21glossary/current/	CWE-89 SQL Injection	CVE-2009-4803	2010-05-26 13:00	2010-04-23	Show	GitHub Exploit DB Packet Storm

347292	-	sun	opensolaris	The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.	CWE-16 Configuration	CVE-2010-0559	2010-05-25 14:51	2010-02-6	Show	GitHub Exploit DB Packet Storm

347293	-	info-zip	unzip	Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.	NVD-CWE-Other	CVE-2001-1268	2010-05-25 13:10	2001-07-12	Show	GitHub Exploit DB Packet Storm

347294	-	info-zip	unzip	Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.	NVD-CWE-Other	CVE-2001-1269	2010-05-25 13:10	2001-07-12	Show	GitHub Exploit DB Packet Storm

347295	-	xfree86_project	xfree86_x_server	dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.	NVD-CWE-Other	CVE-2001-1409	2010-05-25 13:10	2003-07-24	Show	GitHub Exploit DB Packet Storm

347296	-	sebrac.webcindario	migascms	SQL injection vulnerability in function.php in MigasCMS 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo act…	CWE-89 SQL Injection	CVE-2010-2012	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

347297	-	createch-group	lisk_cms	Cross-site scripting (XSS) vulnerability in cp/list_content.php in LiSK CMS 4.4 allows remote attackers to inject arbitrary web script or HTML via the cl or possibly id parameter.	CWE-79 Cross-site Scripting	CVE-2010-2014	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

347298	-	createch-group	lisk_cms	Multiple SQL injection vulnerabilities in LiSK CMS 4.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in a view_inbox action to cp/cp_messages.php or (2) the id par…	CWE-89 SQL Injection	CVE-2010-2015	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

347299	-	bukulokomedia	lokomedia_cms	Cross-site scripting (XSS) vulnerability in hasil-pencarian.html in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to inject arbitrary web script or HTML via the kata parameter. NOTE: some of t…	CWE-79 Cross-site Scripting	CVE-2010-2017	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm

347300	-	bukulokomedia	lokomedia_cms	SQL injection vulnerability in downlot.php in Lokomedia CMS 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the file parameter. NOTE: the prov…	CWE-89 SQL Injection	CVE-2010-2019	2010-05-25 02:30	2010-05-25	Show	GitHub Exploit DB Packet Storm