Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226261 7.5 危険 Vanilla Forums - Vanilla Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3527 2013-05-14 15:37 2013-04-5 Show GitHub Exploit DB Packet Storm
226262 4.3 警告 georgemathewk - WordPress 用 Traffic Analyzer プラグインの js/ta_loaded.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3526 2013-05-14 15:37 2013-05-10 Show GitHub Exploit DB Packet Storm
226263 7.5 危険 David Clark - phpVMS 用 Pop Up News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3524 2013-05-14 15:36 2013-05-10 Show GitHub Exploit DB Packet Storm
226264 7.5 危険 greg jennings - This HTML Is Simple における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3523 2013-05-14 15:35 2013-04-1 Show GitHub Exploit DB Packet Storm
226265 6.5 警告 vBulletin Solutions, Inc. - vBulletin の index.php/ajax/api/reputation/vote における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3522 2013-05-14 15:34 2013-05-10 Show GitHub Exploit DB Packet Storm
226266 4.6 警告 シスコシステムズ - Cisco Aggregation Services Router Route Processor 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) 状態にされる脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1136 2013-05-14 14:52 2013-05-13 Show GitHub Exploit DB Packet Storm
226267 10 危険 phpvms.net - phpVMS の admin/action.php における脆弱性 CWE-noinfo
情報不足 		CVE-2012-6552 2013-05-14 12:00 2012-08-24 Show GitHub Exploit DB Packet Storm
226268 9.3 危険 サムスン - MarkAny ContentSAFER MASetupCaller の ActiveX コントロールに脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2990 2013-05-13 17:59 2012-08-24 Show GitHub Exploit DB Packet Storm
226269 4.3 警告 WPPA Opa Jaap - WordPress 用 WP Photo Album Plus プラグインの wp-admin/admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3254 2013-05-13 17:32 2013-05-6 Show GitHub Exploit DB Packet Storm
226270 6.8 警告 NetWebLogic - WordPress 用 Login With Ajax プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2707 2013-05-13 17:31 2013-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3431 7.5 HIGH
Network 		nvidia triton_inference_server NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow. A successful exploit of this vulnerability might lead to denial of service. CWE-190
 Integer Overflow or Wraparound 		CVE-2026-24210 2026-05-21 02:20 2026-05-20 Show GitHub Exploit DB Packet Storm
3432 7.5 HIGH
Network 		nvidia triton_inference_server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-24215 2026-05-21 02:19 2026-05-20 Show GitHub Exploit DB Packet Storm
3433 9.8 CRITICAL
Network 		nvidia triton_inference_server NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code executio… CWE-125
Out-of-bounds Read 		CVE-2026-24213 2026-05-21 02:18 2026-05-20 Show GitHub Exploit DB Packet Storm
3434 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-269
 Improper Privilege Management 		CVE-2026-8972 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
3435 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-269
 Improper Privilege Management 		CVE-2026-8957 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
3436 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. CWE-269
 Improper Privilege Management 		CVE-2026-8955 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
3437 8.8 HIGH
Network 		mozilla firefox
thunderbird 		Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CWE-269
 Improper Privilege Management 		CVE-2026-8952 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
3438 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-8342 2026-05-21 02:16 2026-05-21 Show GitHub Exploit DB Packet Storm
3439 7.1 HIGH
Network 		- - A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID Connect (OIDC) clie… CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-7571 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
3440 7.5 HIGH
Network 		- - A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim i… CWE-290
 Authentication Bypass by Spoofing 		CVE-2026-7507 2026-05-21 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm