Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1071 5.9 警告
Network
PerlDancer Dancer::Session::Abstract PerlDancerのDancer::Session::Abstractにおける複数の脆弱性 CWE-338
CWE-340
CVE-2026-5080 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1072 5.5 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-5475 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
1073 4.6 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-189
CWE-190
CVE-2026-5476 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
1074 7.8 重要
Local
IBM IBM Turbonomic Prometurbo agent IBMのIBM Turbonomic Prometurbo agentにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-6389 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1075 5.5 警告
Local
レッドハット multicluster engine for Kubernetes レッドハットのmulticluster engine for Kubernetesにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存
CVE-2026-7163 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1076 7.2 重要
Network
Amazon.com, Inc. Amazon ECS container agent Amazon.com, Inc.のAmazon ECS container agentにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-7461 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1077 6.5 警告
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるHTTPレスポンスの分割に関する脆弱性 CWE-443
CWE-Other
CVE-2026-33523 2026-05-7 11:29 2026-05-4 Show GitHub Exploit DB Packet Storm
1078 3.3
Local
Uutils uutils coreutils Uutilsのuutils coreutilsにおける不適切な短絡評価に関する脆弱性 CWE-768
不適切な短絡評価
CVE-2026-35378 2026-05-7 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
1079 7.5 重要
Network
- 4D SASの4D ServerにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2024-39847 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1080 9.1 緊急
Network
rti RTI Connext Professional rtiのRTI Connext ProfessionalにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2025-14543 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312781 6.1 MEDIUM
Network
baijunyao bjyadmin bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/getContent.php CWE-79
Cross-site Scripting
CVE-2024-41351 2024-09-5 01:07 2024-08-30 Show GitHub Exploit DB Packet Storm
312782 6.1 MEDIUM
Network
baijunyao bjyadmin bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php CWE-79
Cross-site Scripting
CVE-2024-41350 2024-09-5 01:07 2024-08-30 Show GitHub Exploit DB Packet Storm
312783 6.1 MEDIUM
Network
jpatokal openflights openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php CWE-79
Cross-site Scripting
CVE-2024-41348 2024-09-5 01:06 2024-08-30 Show GitHub Exploit DB Packet Storm
312784 6.1 MEDIUM
Network
jpatokal openflights openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php CWE-79
Cross-site Scripting
CVE-2024-41347 2024-09-5 01:05 2024-08-30 Show GitHub Exploit DB Packet Storm
312785 5.4 MEDIUM
Network
jpatokal openflights openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php CWE-79
Cross-site Scripting
CVE-2024-41346 2024-09-5 01:05 2024-08-30 Show GitHub Exploit DB Packet Storm
312786 9.8 CRITICAL
Network
smackcoders sendgrid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress… CWE-89
SQL Injection
CVE-2024-43965 2024-09-5 01:02 2024-08-30 Show GitHub Exploit DB Packet Storm
312787 9.8 CRITICAL
Network
progress whatsup_gold In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users enc… CWE-89
SQL Injection
CVE-2024-6671 2024-09-5 00:53 2024-08-30 Show GitHub Exploit DB Packet Storm
312788 9.8 CRITICAL
Network
mozilla firefox Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code… CWE-787
 Out-of-bounds Write
CVE-2024-8389 2024-09-5 00:50 2024-09-3 Show GitHub Exploit DB Packet Storm
312789 9.8 CRITICAL
Network
seacms seacms SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del. CWE-89
SQL Injection
CVE-2024-44921 2024-09-5 00:00 2024-09-3 Show GitHub Exploit DB Packet Storm
312790 6.1 MEDIUM
Network
seacms seacms A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the si… CWE-79
Cross-site Scripting
CVE-2024-44920 2024-09-4 23:59 2024-09-3 Show GitHub Exploit DB Packet Storm