Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226991 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 および 10 における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4782 2012-12-25 17:11 2012-12-11 Show GitHub Exploit DB Packet Storm
226992 9.3 危険 マイクロソフト - Microsoft Windows における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-4774 2012-12-25 17:08 2012-12-11 Show GitHub Exploit DB Packet Storm
226993 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-2556 2012-12-25 17:05 2012-12-11 Show GitHub Exploit DB Packet Storm
226994 10 危険 Wansview
ShenZhen Foscam Intelligent Technology
- 複数のネットワークカメラに認証回避の脆弱性 CWE-287
不適切な認証
CVE-2012-3002 2012-12-25 16:44 2012-10-11 Show GitHub Exploit DB Packet Storm
226995 10 危険 Carlo Gavazzi - Carlo Gavazzi EOS-Box のファームウェアにおける管理アクセス権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-6428 2012-12-25 16:37 2012-12-19 Show GitHub Exploit DB Packet Storm
226996 7.5 危険 Carlo Gavazzi - Carlo Gavazzi EOS-Box のファームウェアにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6427 2012-12-25 16:33 2012-12-19 Show GitHub Exploit DB Packet Storm
226997 4.3 警告 シーメンス - 複数の Siemens 製品におけるサーバを偽装される脆弱性 CWE-200
情報漏えい
CVE-2012-4698 2012-12-25 16:32 2012-12-12 Show GitHub Exploit DB Packet Storm
226998 4.3 警告 VMware - VMware vCenter Server Appliance における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2012-6325 2012-12-25 15:19 2012-12-20 Show GitHub Exploit DB Packet Storm
226999 4 警告 VMware - VMware vCenter Server Appliance におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-6324 2012-12-25 15:19 2012-12-20 Show GitHub Exploit DB Packet Storm
227000 6.4 警告 IBM - IBM Tivoli Storage Manager for Space Management におけるファイルシステムオブジェクトを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2012-5954 2012-12-25 15:17 2012-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3271 5.4 MEDIUM
Network
traccar traccar Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the KML and GPX export functionality writes device names to XML output without proper … CWE-91
Blind XPath Injection
CVE-2026-27693 2026-05-9 05:04 2026-05-5 Show GitHub Exploit DB Packet Storm
3272 5.4 MEDIUM
Network
traccar traccar Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geofence, and driver n… CWE-79
Cross-site Scripting
CVE-2026-27694 2026-05-9 05:03 2026-05-5 Show GitHub Exploit DB Packet Storm
3273 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_object() The ceph_zero_partial_object function was missing proper snapshot con… NVD-CWE-noinfo
CVE-2026-43273 2026-05-9 05:01 2026-05-6 Show GitHub Exploit DB Packet Storm
3274 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is… CWE-476
 NULL Pointer Dereference
CVE-2026-43272 2026-05-9 05:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3275 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() In mtk_mdp_probe(), vpu_get_plat_device() increases the reference co… NVD-CWE-Other
CVE-2026-43270 2026-05-9 05:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3276 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process_metadata_update The function process_metadata_update() blindly dereferences t… CWE-476
 NULL Pointer Dereference
CVE-2026-43271 2026-05-9 05:00 2026-05-6 Show GitHub Exploit DB Packet Storm
3277 4.6 MEDIUM
Network
openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0, the Command Sender UI uses an unsafe eval() function on… CWE-79
Cross-site Scripting
CVE-2026-42086 2026-05-9 04:54 2026-05-5 Show GitHub Exploit DB Packet Storm
3278 4.3 MEDIUM
Network
openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, OpenC3 COSMOS contains a design flaw in… CWE-23
 Relative Path Traversal
CVE-2026-42085 2026-05-9 04:54 2026-05-5 Show GitHub Exploit DB Packet Storm
3279 8.1 HIGH
Network
openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.10.5 and 7.0.0-rc3, the OpenC3 password change functionalit… CWE-620
 Unverified Password Change
CVE-2026-42084 2026-05-9 04:54 2026-05-5 Show GitHub Exploit DB Packet Storm
3280 9.6 CRITICAL
Network
openc3 cosmos OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability e… CWE-89
SQL Injection
CVE-2026-42087 2026-05-9 04:53 2026-05-5 Show GitHub Exploit DB Packet Storm