Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226211 2.6 注意 株式会社ピーエムナイン - OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2300 2013-03-26 12:02 2013-03-26 Show GitHub Exploit DB Packet Storm
226212 2.6 注意 COB's Products - COBIME におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0720 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
226213 2.6 注意 codedesign.jp - ArtIME 日本語入力におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0719 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
226214 2.6 注意 Baidu, Inc. - Simeji におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0718 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
226215 6.8 警告 Verizon - Verizon FiOS Actiontec ルータ MI424WR-GEN3I にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-0126 2013-03-26 10:48 2013-03-19 Show GitHub Exploit DB Packet Storm
226216 4.3 警告 Askia - ASKIA askiaweb の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0124 2013-03-25 19:10 2013-03-20 Show GitHub Exploit DB Packet Storm
226217 7.5 危険 Askia - ASKIA askiaweb の管理インターフェイスにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-0123 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
226218 3.5 注意 IBM - IBM Tivoli Endpoint Manager の Web レポートにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0453 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
226219 4.3 警告 IBM - IBM Rational ClearQuest の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5757 2013-03-25 19:08 2013-03-20 Show GitHub Exploit DB Packet Storm
226220 7.5 危険 CA Technologies - 複数の CA SiteMinder 製品における他のユーザを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2279 2013-03-25 19:07 2013-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3131 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cau… CWE-125
Out-of-bounds Read 		CVE-2026-28991 2026-05-13 23:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3132 4.7 MEDIUM
Local 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS … CWE-362
Race Condition 		CVE-2026-28992 2026-05-13 23:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3133 5.5 MEDIUM
Local 		apple ipados
iphone_os
macos
visionos 		This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, mac… CWE-284
Improper Access Control 		CVE-2026-28993 2026-05-13 23:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3134 5.3 MEDIUM
Adjacent 		apple ipados
iphone_os
macos
tvos
watchos 		A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS T… CWE-416
 Use After Free 		CVE-2026-28994 2026-05-13 23:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3135 7.3 HIGH
Network 		apple ipados
iphone_os
macos
tvos
watchos 		An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected s… CWE-125
Out-of-bounds Read 		CVE-2026-43655 2026-05-13 23:07 2026-05-12 Show GitHub Exploit DB Packet Storm
3136 7.3 HIGH
Network 		apple ipados
iphone_os
macos 		An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, ma… CWE-787
 Out-of-bounds Write 		CVE-2026-43656 2026-05-13 23:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3137 6.2 MEDIUM
Local 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, mac… CWE-787
 Out-of-bounds Write 		CVE-2026-43666 2026-05-13 23:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3138 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS T… CWE-416
 Use After Free 		CVE-2026-43668 2026-05-13 23:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3139 8.6 HIGH
Network 		inngest inngest Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration. Versions 3.22.0 through 3.53.1 contain a vulnerability that allows un… CWE-200
CWE-497
Information Exposure
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-42047 2026-05-13 23:06 2026-05-8 Show GitHub Exploit DB Packet Storm
3140 6.5 MEDIUM
Network 		apache apache-airflow-providers-opensearch The OpenSearch logging provider, when configured with a `host` URL that embeds credentials (for example `https://user:password@server.example.com:9200`), wrote the full host URL — including the embed… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-43826 2026-05-13 23:05 2026-05-11 Show GitHub Exploit DB Packet Storm