Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225991	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2451	2013-03-27 17:18	2011-11-10	Show	GitHub Exploit DB Packet Storm

225992	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2450	2013-03-27 17:16	2011-11-10	Show	GitHub Exploit DB Packet Storm

225993	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2445	2013-03-27 17:14	2011-11-10	Show	GitHub Exploit DB Packet Storm

225994	4.3	警告	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2444	2013-03-27 17:13	2011-09-21	Show	GitHub Exploit DB Packet Storm

225995	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2430	2013-03-27 17:12	2011-09-21	Show	GitHub Exploit DB Packet Storm

225996	5	警告	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2429	2013-03-27 17:10	2011-09-21	Show	GitHub Exploit DB Packet Storm

225997	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2428	2013-03-27 17:07	2011-09-21	Show	GitHub Exploit DB Packet Storm

225998	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2427	2013-03-27 17:05	2011-09-21	Show	GitHub Exploit DB Packet Storm

225999	9.3	危険	ヒューレット・パッカードアドビシステムズ	-	Adobe Flash Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2426	2013-03-27 17:04	2011-09-21	Show	GitHub Exploit DB Packet Storm

226000	10	危険	ヒューレット・パッカードアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2425	2013-03-27 17:03	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2681	7.7	HIGH Network	-	-	FastGPT is an AI Agent building platform. In versions 4.14.11 and prior, FastGPT's isInternalAddress() function in packages/service/common/system/utils.ts blocks cloud metadata endpoints using a full…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-42345	2026-05-13 01:40	2026-05-9	Show	GitHub Exploit DB Packet Storm

2682	6.3	MEDIUM Network	-	-	FastGPT is an AI Agent building platform. Prior to version 4.14.17, FastGPT had an inconsistent SSRF protection gap in MCP tool URL handling. The direct MCP preview/run endpoints already rejected int…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44284	2026-05-13 01:40	2026-05-9	Show	GitHub Exploit DB Packet Storm

2683	-		-	-	Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint (POST /api/v1/archives/[li…	CWE-79 Cross-site Scripting	CVE-2026-42455	2026-05-13 01:39	2026-05-9	Show	GitHub Exploit DB Packet Storm

2684	9.1	CRITICAL Network	-	-	Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vulnerability in the f…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-44313	2026-05-13 01:39	2026-05-9	Show	GitHub Exploit DB Packet Storm

2685	5.3	MEDIUM Network	-	-	A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59. Affected by this issue is the function recall_relevant_memories_to_working_memory of the file core/…	CWE-400 CWE-404 Uncontrolled Resource Consumption Improper Resource Shutdown or Release	CVE-2026-8319	2026-05-13 01:38	2026-05-12	Show	GitHub Exploit DB Packet Storm

2686	4.7	MEDIUM Network	-	-	A security vulnerability has been detected in jishenghua jshERP up to 3.6. This affects the function getUserByWeixinCode of the file jshERP-boot/src/main/java/com/jsh/erp/service/UserService.java of …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-8320	2026-05-13 01:38	2026-05-12	Show	GitHub Exploit DB Packet Storm

2687	7.3	HIGH Network	-	-	A vulnerability was detected in inkeep agents 0.58.14. This vulnerability affects the function createDevContext of the file agents-api/src/middleware/runAuth.ts of the component runAuth Middleware. P…	CWE-287 CWE-288 Improper Authentication Authentication Bypass Using an Alternate Path or Channel	CVE-2026-8321	2026-05-13 01:38	2026-05-12	Show	GitHub Exploit DB Packet Storm

2688	-		-	-	CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in ra…	CWE-1188 Insecure Default Initialization of Resource	CVE-2026-6866	2026-05-13 01:38	2026-05-13	Show	GitHub Exploit DB Packet Storm

2689	4.4	MEDIUM Local	-	-	An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a sh…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-7431	2026-05-13 01:38	2026-05-13	Show	GitHub Exploit DB Packet Storm

2690	7.8	HIGH Local	-	-	A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM	CWE-362 Race Condition	CVE-2026-7432	2026-05-13 01:38	2026-05-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed