Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225251 5.4 警告 Linux - Linux Kernel の IPv6 スタックの net/ipv6/ip6_fib.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4125 2013-07-17 20:42 2013-07-12 Show GitHub Exploit DB Packet Storm
225252 4.3 警告 Drupal - Drupal の Image モジュールにおける他の制限イメージの派生イメージを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0246 2013-07-17 16:54 2013-01-16 Show GitHub Exploit DB Packet Storm
225253 2.1 注意 Drupal - Drupal の Book モジュールのプリンタフレンドリーバージョン機能におけるノードタイトルおよびノードコンテンツを読み取られる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0245 2013-07-17 16:51 2013-01-16 Show GitHub Exploit DB Packet Storm
225254 4.3 警告 Anshul Sharma - WordPress 用 Category Grid View Gallery の includes/CatGridPost.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4117 2013-07-17 16:50 2013-07-2 Show GitHub Exploit DB Packet Storm
225255 6.8 警告 Mdolon - WordPress 用 Sharebar プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3491 2013-07-17 16:49 2013-07-4 Show GitHub Exploit DB Packet Storm
225256 9 危険 Wave Systems Corp. - Wave EMBASSY Remote Administration Server のヘルプデスクアプリケーションにおける SQL インジェクションの脆弱性 CWE-78
CWE-89
CVE-2013-3578 2013-07-17 16:03 2013-07-12 Show GitHub Exploit DB Packet Storm
225257 7.5 危険 Wave Systems Corp. - Wave EMBASSY Remote Administration Server のヘルプデスクアプリケーションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3577 2013-07-17 16:02 2013-07-12 Show GitHub Exploit DB Packet Storm
225258 4.3 警告 Novell - Windows 上で稼働する Novell GroupWise のクライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1087 2013-07-17 11:20 2013-04-2 Show GitHub Exploit DB Packet Storm
225259 4 警告 シスコシステムズ - Cisco Secure Access Control System の Web インターフェースにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3428 2013-07-17 11:17 2013-07-15 Show GitHub Exploit DB Packet Storm
225260 6.2 警告 BlackBerry - BlackBerry Z10 スマートフォン上で稼働する BlackBerry OS におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3692 2013-07-16 16:45 2013-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2431 - - - Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-5091 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2432 7.8 HIGH
Local 		freebsd freebsd The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is checked, the user-supplied list of supplementary groups is copied into a fixed-… CWE-121
Stack-based Buffer Overflow 		CVE-2026-45250 2026-05-22 11:16 2026-05-21 Show GitHub Exploit DB Packet Storm
2433 7.7 HIGH
Network 		- - A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulat… CWE-22
Path Traversal 		CVE-2026-34911 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2434 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-34910 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2435 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an und… CWE-22
Path Traversal 		CVE-2026-34909 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2436 10.0 CRITICAL
Network 		- - A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system. CWE-284
Improper Access Control 		CVE-2026-34908 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2437 9.1 CRITICAL
Network 		- - A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection. CWE-20
 Improper Input Validation  		CVE-2026-33000 2026-05-22 11:16 2026-05-22 Show GitHub Exploit DB Packet Storm
2438 7.8 HIGH
Local 		mullvad mullvad_vpn Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or upgrade. The installer… CWE-269
CWE-345
CWE-427
NVD-CWE-noinfo
 Improper Privilege Management
 Insufficient Verification of Data Authenticity
 Uncontrolled Search Path Element 		CVE-2026-32323 2026-05-22 09:04 2026-05-19 Show GitHub Exploit DB Packet Storm
2439 4.3 MEDIUM
Network 		glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization 		CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
2440 3.5 LOW
Network 		github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences 		CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm