Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2061	5.5	警告 Local	Igor Arsenin	TaskInfo	Igor ArseninのTaskInfoにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2019-25667	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2062	8.2	重要 Network	PHP Scripts Mall Pvt Ltd	News Website Script	PhpscriptsmallのNews Website ScriptにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25668	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2063	7.5	重要 Network	Novell	eDirectory	ARCA SOLUTIONS INC.のeDirectoryにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2019-25675	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2064	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

2065	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2066	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2067	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

2068	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

2069	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

2070	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
281	6.1	MEDIUM Local	-	-	CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the WHD size computation inside _load_pnm() that can bypass the memory all… New	CWE-190 Integer Overflow or Wraparound	CVE-2026-42144	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

282	4.4	MEDIUM Network	-	-	PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows user… New	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42140	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

283	-		-	-	Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can upload an SVG file with XSS. The method POST /v1/fi… New	CWE-79 Cross-site Scripting	CVE-2026-42138	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

284	6.5	MEDIUM Network	-	-	titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authenticated user can subscr… New	CWE-200 Information Exposure	CVE-2026-42092	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

285	9.6	CRITICAL Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Py… New	CWE-250 Execution with Unnecessary Privileges	CVE-2026-42088	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

286	4.6	MEDIUM Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0, the Command Sender UI uses an unsafe eval() function on… New	CWE-79 Cross-site Scripting	CVE-2026-42086	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

287	4.3	MEDIUM Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in… New	CWE-23 Relative Path Traversal	CVE-2026-42085	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

288	8.1	HIGH Network	-	-	OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionalit… New	CWE-620 Unverified Password Change	CVE-2026-42084	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

289	8.1	HIGH Network	-	-	Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary… New	CWE-22 Path Traversal	CVE-2026-42075	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm

290	-		-	-	Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. In this runtime, <%= ..… New	CWE-79 Cross-site Scripting	CVE-2026-42052	2026-05-5 03:16	2026-05-5	Show	GitHub Exploit DB Packet Storm