Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223901 4 警告 IBM - IBM Maximo Asset Management における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5383 2013-10-24 17:15 2013-09-25 Show GitHub Exploit DB Packet Storm
223902 6.5 警告 IBM - IBM Maximo Asset Management における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-5381 2013-10-24 17:14 2013-09-25 Show GitHub Exploit DB Packet Storm
223903 5 警告 Wireshark - Wireshark の DVB-CI 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4930 2013-10-24 17:14 2013-07-26 Show GitHub Exploit DB Packet Storm
223904 4.9 警告 Open-Xchange
HtmlCleaner		 - Open-Xchange App Suite などの製品で使用される HtmlCleaner における他人の個人的な電子メールを読まれる脆弱性 CWE-362
競合状態 		CVE-2013-5035 2013-10-24 17:13 2013-08-2 Show GitHub Exploit DB Packet Storm
223905 7.2 危険 Werner Baumann - WEB-DAV Linux File System における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4362 2013-10-24 17:12 2013-09-15 Show GitHub Exploit DB Packet Storm
223906 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3983 2013-10-24 17:12 2012-10-9 Show GitHub Exploit DB Packet Storm
223907 7.8 危険 Wireshark - Wireshark の DIS 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2013-4929 2013-10-24 17:09 2013-07-26 Show GitHub Exploit DB Packet Storm
223908 7.8 危険 Wireshark - Wireshark の Bluetooth OBEX 解析機能におけるにおける整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-4928 2013-10-24 17:08 2013-07-26 Show GitHub Exploit DB Packet Storm
223909 4.3 警告 Bitcoin Project - bitcoind の bitcoinrpc.cpp の HTTPAuthorized 関数におけるパスワードを断定される脆弱性 CWE-200
情報漏えい 		CVE-2013-4165 2013-10-24 17:08 2013-07-20 Show GitHub Exploit DB Packet Storm
223910 4.4 警告 Phusion B.V. - Ruby 用 Phusion Passenger gem の ext/common/ServerInstanceDir.h における権限を取得される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-4136 2013-10-24 17:07 2013-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
831 4.3 MEDIUM
Network 		- - EspoCRM is an open source customer relationship management application. Prior to 9.3.5, a business logic flaw (Broken Access Control) in EspoCRM 9.3.3 allows low-privileged users to pin arbitrary not… New CWE-284
CWE-639
CWE-862
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Missing Authorization 		CVE-2026-41160 2026-05-29 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
832 - - - Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2.9.15, 2.11.13, 2.12.10, and 2.13.5, the default kuma-cp config leaks the admin… New CWE-346
CWE-942
 Origin Validation Error
 Permissive Cross-domain Policy with Untrusted Domains 		CVE-2026-45021 2026-05-29 03:56 2026-05-29 Show GitHub Exploit DB Packet Storm
833 - - - Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search pa… New CWE-22
Path Traversal 		CVE-2026-45017 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
834 8.7 HIGH
Network 		- - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via unsanitized data-mce-* attributes (data-mce-href, data-mce-src, data-mce-style).… New CWE-79
Cross-site Scripting 		CVE-2026-47759 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
835 8.7 HIGH
Network 		- - TinyMCE is an open source rich text editor. From 6.8.0 to before 7.1.0, TinyMCE contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using… New CWE-79
Cross-site Scripting 		CVE-2026-47760 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
836 8.7 HIGH
Network 		- - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted data-mce-* a… New CWE-79
Cross-site Scripting 		CVE-2026-47761 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
837 8.7 HIGH
Network 		- - TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and injec… New CWE-79
Cross-site Scripting 		CVE-2026-47762 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
838 - - - In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Canal/Flannel-Calico d… New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-41184 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
839 - - - When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, t… New CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-41185 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
840 8.6 HIGH
Local 		- - Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or… New CWE-78
OS Command  		CVE-2026-44461 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm