Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225221 3.5 注意 CloudBees - CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6074 2013-02-27 16:25 2012-11-20 Show GitHub Exploit DB Packet Storm
225222 5.8 警告 CloudBees - CloudBees Jenkins におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-6073 2013-02-27 16:25 2012-11-20 Show GitHub Exploit DB Packet Storm
225223 4.3 警告 CloudBees - CloudBees Jenkins における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2012-6072 2013-02-27 16:10 2012-11-20 Show GitHub Exploit DB Packet Storm
225224 4.3 警告 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6121 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
225225 4.3 警告 The JForum Team - JForum の jforum.page におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5337 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
225226 3.6 注意 レッドハット - Red Hat OpenShift Origin における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0164 2013-02-27 16:06 2013-01-31 Show GitHub Exploit DB Packet Storm
225227 2.1 注意 レッドハット - Red Hat OpenShift Origin の rhc-chk.rb における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-5658 2013-02-27 16:04 2013-01-31 Show GitHub Exploit DB Packet Storm
225228 5.8 警告 レッドハット - Red Hat OpenShift Origin におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-5647 2013-02-27 16:03 2013-01-8 Show GitHub Exploit DB Packet Storm
225229 7.5 危険 レッドハット - Red Hat OpenShift Origin における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5646 2013-02-27 16:02 2013-01-8 Show GitHub Exploit DB Packet Storm
225230 4.9 警告 レッドハット - Red Hat Enterprise Linux で使用される autofs におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2697 2013-02-27 15:54 2013-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1141 8.8 HIGH
Network
- - AntSword is a cross-platform website management toolkit. Prior to 2.1.16, incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection. This vulnerability is fixed i… CWE-79
CWE-94
CWE-1188
Cross-site Scripting
Code Injection
 Insecure Default Initialization of Resource
CVE-2026-43892 2026-05-14 03:24 2026-05-13 Show GitHub Exploit DB Packet Storm
1142 7.5 HIGH
Network
- - phpseclib is a PHP secure communications library. Prior to 1.0.29, 2.0.54, and 3.0.52, anyone loading untrusted ASN1 files (eg. X509 certificates, RSA PKCS8 private or public keys, etc). This is a by… CWE-400
 Uncontrolled Resource Consumption
CVE-2026-44167 2026-05-14 03:24 2026-05-13 Show GitHub Exploit DB Packet Storm
1143 8.2 HIGH
Network
- - ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target private IP address … CWE-184
CWE-918
 Incomplete Blacklist
Server-Side Request Forgery (SSRF) 
CVE-2026-43929 2026-05-14 03:24 2026-05-13 Show GitHub Exploit DB Packet Storm
1144 6.2 MEDIUM
Network
- - LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.48, when LobeChat processes custom tags in the Render process of src/featur… CWE-79
Cross-site Scripting
CVE-2026-42045 2026-05-14 03:23 2026-05-13 Show GitHub Exploit DB Packet Storm
1145 - - - Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker knows the email address of the victim they can create and link an unverified Po… CWE-287
Improper Authentication
CVE-2026-44166 2026-05-14 03:23 2026-05-13 Show GitHub Exploit DB Packet Storm
1146 3.8 LOW
Network
hono hono Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows to… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-44459 2026-05-14 03:21 2026-05-14 Show GitHub Exploit DB Packet Storm
1147 9.1 CRITICAL
Network
- - Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and … CWE-287
CWE-697
Improper Authentication
 Incorrect Comparison
CVE-2026-44196 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
1148 9.1 CRITICAL
Network
- - Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured… CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization
CVE-2026-42889 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
1149 - - - sse-channel is an SSE-implementation which can be used to any node.js http request/response stream. Prior to 4.0.1, implementations that allow user-provided values to be passed to event, retry or id … CWE-93
CRLF Injection
CVE-2026-44217 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
1150 9.0 CRITICAL
Network
- - ArcadeDB is a Multi-Model DBMS. Prior to 2.6.4, authenticated users and API tokens scoped to a specific database could read, write, and mutate schema on any other database on the same server. Two dis… CWE-863
 Incorrect Authorization
CVE-2026-44221 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm