Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191 7.5 重要
Network
The Tor Project Tor The Tor ProjectのTorにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス
CVE-2026-44602 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
192 5.5 警告
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 New CWE-119
CWE-125
CVE-2026-8084 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
193 7.8 重要
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 New CWE-119
CWE-122
CVE-2026-8086 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
194 7.8 重要
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 New CWE-119
CWE-122
CVE-2026-8087 2026-05-11 11:04 2026-05-7 Show GitHub Exploit DB Packet Storm
195 5.5 警告
Local
Open Source Geospatial Foundation GDAL Open Source Geospatial FoundationのGDALにおける複数の脆弱性 New CWE-119
CWE-125
CVE-2026-8088 2026-05-11 11:03 2026-05-7 Show GitHub Exploit DB Packet Storm
196 7.3 重要
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用
CVE-2026-8090 2026-05-11 11:03 2026-05-7 Show GitHub Exploit DB Packet Storm
197 7.8 重要
Local
Forcepoint LLC. Next Generation Firewall (NGFW) Forcepoint LLC.のNext Generation Firewall (NGFW)における不要な特権による実行に関する脆弱性 New CWE-250
CWE-noinfo
CVE-2025-12690 2026-05-11 11:03 2026-03-11 Show GitHub Exploit DB Packet Storm
198 6.8 警告
Network
vaadin Vaadin Vaadin Ltd.のVaadinにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル
CVE-2026-2741 2026-05-11 11:03 2026-03-10 Show GitHub Exploit DB Packet Storm
199 5.3 警告
Network
vaadin Vaadin Vaadin Ltd.のVaadinにおけるアクセス制御に関する脆弱性 New CWE-284
CWE-Other
CVE-2026-2742 2026-05-11 11:03 2026-03-10 Show GitHub Exploit DB Packet Storm
200 7.8 重要
Local
ASSA ABLOY Visionline ASSA ABLOYのVisionlineにおける複数の脆弱性 New CWE-250
CWE-276
CWE-732
CWE-732
CVE-2026-3315 2026-05-11 11:03 2026-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312431 6.1 MEDIUM
Network
xiebruce picuploader A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injec… CWE-79
Cross-site Scripting
CVE-2024-44796 2024-09-7 08:35 2024-08-27 Show GitHub Exploit DB Packet Storm
312432 8.8 HIGH
Network
roxy-wi roxy-wi Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. An OS Command Injection vulnerability allows any authenticated user on the application to execute arbitrary code… CWE-78
OS Command 
CVE-2024-43804 2024-09-7 07:57 2024-08-30 Show GitHub Exploit DB Packet Storm
312433 8.1 HIGH
Network
getkirby kirby Kirby is a CMS targeting designers and editors. Kirby allows to restrict the permissions of specific user roles. Users of that role can only perform permitted actions. Permissions for creating and de… CWE-863
 Incorrect Authorization
CVE-2024-41964 2024-09-7 07:56 2024-08-30 Show GitHub Exploit DB Packet Storm
312434 5.4 MEDIUM
Network
seacms seacms A cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ad descript… CWE-79
Cross-site Scripting
CVE-2024-44919 2024-09-7 07:54 2024-08-30 Show GitHub Exploit DB Packet Storm
312435 9.8 CRITICAL
Network
deltaww dtn_soft Delta Electronics DTN Soft version 2.0.1 and prior are vulnerable to an attacker achieving remote code execution through a deserialization of untrusted data vulnerability. CWE-502
 Deserialization of Untrusted Data
CVE-2024-8255 2024-09-7 07:53 2024-08-30 Show GitHub Exploit DB Packet Storm
312436 7.5 HIGH
Network
wolfssl wolfssl In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and le… CWE-125
Out-of-bounds Read
CVE-2024-5991 2024-09-7 07:51 2024-08-28 Show GitHub Exploit DB Packet Storm
312437 9.8 CRITICAL
Network
hp security_manager HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries. NVD-CWE-noinfo
CVE-2024-7720 2024-09-7 07:33 2024-08-28 Show GitHub Exploit DB Packet Storm
312438 6.1 MEDIUM
Network
gazelle_project gazelle A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inj… CWE-79
Cross-site Scripting
CVE-2024-44797 2024-09-7 07:27 2024-08-27 Show GitHub Exploit DB Packet Storm
312439 6.5 MEDIUM
Network
beikeshop beikeshop A vulnerability, which was classified as problematic, was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function exportZip of the file /admin/file_manager/expo… CWE-22
Path Traversal
CVE-2024-8165 2024-09-7 07:20 2024-08-26 Show GitHub Exploit DB Packet Storm
312440 8.8 HIGH
Network
beikeshop beikeshop A vulnerability, which was classified as critical, has been found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function rename of the file /Admin/Http/… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-8164 2024-09-7 07:19 2024-08-26 Show GitHub Exploit DB Packet Storm