Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223911 5 警告 Wireshark - Wireshark の DCOM ISystemActivator 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4926 2013-10-24 17:05 2013-07-26 Show GitHub Exploit DB Packet Storm
223912 8.5 危険 IBM - IBM SPSS Analytical Decision Management における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4049 2013-10-24 17:04 2013-09-12 Show GitHub Exploit DB Packet Storm
223913 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-3982 2013-10-24 17:04 2012-10-9 Show GitHub Exploit DB Packet Storm
223914 5 警告 Wireshark - Wireshark の DCOM ISystemActivator 解析機能における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-4925 2013-10-24 17:03 2013-07-26 Show GitHub Exploit DB Packet Storm
223915 4 警告 IBM - IBM Maximo Asset Management におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4020 2013-10-24 17:03 2013-09-25 Show GitHub Exploit DB Packet Storm
223916 5 警告 Wireshark - Wireshark の DCOM ISystemActivator 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4924 2013-10-24 17:02 2013-07-26 Show GitHub Exploit DB Packet Storm
223917 5 警告 IBM - IBM Maximo Asset Management における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4013 2013-10-24 17:01 2013-09-25 Show GitHub Exploit DB Packet Storm
223918 5 警告 Wireshark - Wireshark の DCOM ISystemActivator 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4923 2013-10-24 17:00 2013-07-26 Show GitHub Exploit DB Packet Storm
223919 7.1 危険 Choice Wireless - Choice Wireless Green Packet 4G WiMax modem WIXFMR-111 における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-3581 2013-10-24 17:00 2013-06-28 Show GitHub Exploit DB Packet Storm
223920 4.3 警告 シスコシステムズ - Cisco Unified Communications Manager の Unified Serviceability コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3397 2013-10-24 16:59 2013-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
901 7.3 HIGH
Network 		- - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, call_user_func_array() in fun… Update CWE-94
Code Injection 		CVE-2026-37712 2026-05-29 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
902 9.8 CRITICAL
Network 		- - SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints (mgmt.php, npcmd.php) that a… New CWE-798
 Use of Hard-coded Credentials 		CVE-2026-24444 2026-05-29 02:16 2026-05-29 Show GitHub Exploit DB Packet Storm
903 5.5 MEDIUM
Local 		libusb libusb libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malformed USB configuration descriptor where an interface cla… Update CWE-125
Out-of-bounds Read 		CVE-2026-23679 2026-05-29 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
904 5.5 MEDIUM
Local 		- - SpSoft AppLock (com.sp.protector.free) 7.9.40 for Android allows a local attacker with physical access to bypass fingerprint or PIN authentication. Although the app integrates Android's biometric mec… Update CWE-285
CWE-287
Improper Authorization
Improper Authentication 		CVE-2025-68712 2026-05-29 02:16 2026-05-28 Show GitHub Exploit DB Packet Storm
905 6.6 MEDIUM
Network 		jenkins active_directory Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation. Update CWE-502
 Deserialization of Untrusted Data 		CVE-2026-48919 2026-05-29 02:14 2026-05-28 Show GitHub Exploit DB Packet Storm
906 8.8 HIGH
Network 		jenkins email_extension Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on the image URLs that c… Update CWE-73
 External Control of File Name or Path 		CVE-2026-48920 2026-05-29 02:14 2026-05-28 Show GitHub Exploit DB Packet Storm
907 7.5 HIGH
Network 		jenkins pipeline\ Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a… Update CWE-59
Link Following 		CVE-2026-48921 2026-05-29 02:06 2026-05-28 Show GitHub Exploit DB Packet Storm
908 6.5 MEDIUM
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions han… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-44323 2026-05-29 02:02 2026-05-28 Show GitHub Exploit DB Packet Storm
909 7.5 HIGH
Network 		jenkins credentials_binding Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to w… Update CWE-20
 Improper Input Validation  		CVE-2026-48922 2026-05-29 02:01 2026-05-28 Show GitHub Exploit DB Packet Storm
910 4.3 MEDIUM
Network 		jenkins appspider Jenkins AppSpider Plugin 1.0.17 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to connect to an attacker-spe… Update CWE-269
 Improper Privilege Management 		CVE-2026-48923 2026-05-29 02:01 2026-05-28 Show GitHub Exploit DB Packet Storm