Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224681 6.5 警告 SAP - SAP industry solution for healthcare および SAP ERP Central Component におけるトランザクションの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3061 2013-05-2 14:37 2013-04-16 Show GitHub Exploit DB Packet Storm
224682 7.1 危険 Galil - Galil RIO-47100 Pocket PLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0699 2013-05-2 14:34 2013-04-26 Show GitHub Exploit DB Packet Storm
224683 9.4 危険 MatrikonOPC - MatrikonOPC A&E Historian の Health Monitor サービスにおけるディレクトリトラバーサルの脆弱性 - CVE-2013-0673 2013-05-2 14:33 2013-04-26 Show GitHub Exploit DB Packet Storm
224684 5 警告 MatrikonOPC - MatrikonOPC Security Gateway の設定ユーティリティにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0666 2013-05-2 14:31 2013-04-26 Show GitHub Exploit DB Packet Storm
224685 4.3 警告 IBM - IBM Lotus Notes におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0538 2013-05-2 14:20 2013-04-30 Show GitHub Exploit DB Packet Storm
224686 5.8 警告 IBM - IBM Lotus Notes における Java コードの実行および X-Confirm-Reading-To 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0127 2013-05-2 14:19 2013-04-30 Show GitHub Exploit DB Packet Storm
224687 4.3 警告 Henry Schein - Dentrix G5 の認証情報に関する脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-4952 2013-05-2 14:15 2013-04-30 Show GitHub Exploit DB Packet Storm
224688 5 警告 ヒューレット・パッカード - 複数の HP 製レーザープリンタのファームウェアにおける任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2012-5221 2013-05-1 14:59 2013-04-25 Show GitHub Exploit DB Packet Storm
224689 6.8 警告 シスコシステムズ - 複数の Cisco 製品のコマンドラインインタフェースにおける root 権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1196 2013-05-1 12:34 2013-04-12 Show GitHub Exploit DB Packet Storm
224690 9.3 危険 IBM - IBM SPSS SamplePower の vsflex7l ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5947 2013-05-1 11:42 2013-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
361 4.3 MEDIUM
Network 		- - Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… New CWE-693
 Protection Mechanism Failure 		CVE-2026-8563 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
362 4.3 MEDIUM
Network 		- - Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a … New CWE-20
 Improper Input Validation  		CVE-2026-8528 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
363 6.5 MEDIUM
Network 		- - Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default session id generator re… New CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-8503 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
364 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-contr… New CWE-77
Command Injection 		CVE-2026-46508 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
365 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the l… New CWE-352
CWE-384
 Origin Validation Error
 Session Fixation 		CVE-2026-45773 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
366 - - - Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted reposi… New CWE-426
 Untrusted Search Path 		CVE-2026-45772 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
367 7.3 HIGH
Network 		- - Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands. The method starts a shell process and writes attacker-controlled command strings directly to the proce… New CWE-77
Command Injection 		CVE-2026-39054 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
368 6.5 MEDIUM
Network 		- - Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner. The method ScriptRunner.run(String expression, String type, Map<String, Object> context) evaluates attacker-controlled sc… New CWE-94
Code Injection 		CVE-2026-39052 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
369 7.5 HIGH
Network 		- - An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js components New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-38728 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm
370 8.2 HIGH
Network 		- - A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control fu… New CWE-124
Buffer Underflow 		CVE-2026-34253 2026-05-16 01:16 2026-05-16 Show GitHub Exploit DB Packet Storm