Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230361 4.4 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (CPU 資源の消費およびホストハング) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3131 2012-12-14 16:03 2011-08-12 Show GitHub Exploit DB Packet Storm
230362 6.5 警告 Centreon - Centreon にブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5967 2012-12-14 15:59 2012-12-13 Show GitHub Exploit DB Packet Storm
230363 6.8 警告 D-Link Systems, Inc. - D-Link DSL-2730u に OS コマンドインジェクションの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5966 2012-12-14 15:49 2012-12-13 Show GitHub Exploit DB Packet Storm
230364 4.3 警告 ForeScout Technologies - Forescout CounterACT NAC デバイスにおけるARP ポイズニング攻撃が実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4985 2012-12-14 15:37 2012-12-5 Show GitHub Exploit DB Packet Storm
230365 6.8 警告 シスコシステムズ - 64-bit Linux プラットフォーム上の Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2496 2012-12-14 14:53 2012-06-20 Show GitHub Exploit DB Packet Storm
230366 4.3 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client および Cisco Secure Desktop におけるダウングレードを強制される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2495 2012-12-14 14:50 2012-06-20 Show GitHub Exploit DB Packet Storm
230367 8.5 危険 Axway - Axway SecureTransport におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4991 2012-12-14 14:49 2012-12-13 Show GitHub Exploit DB Packet Storm
230368 4.3 警告 シスコシステムズ - Cisco AnyConnect Secure Mobility Client におけるバージョンのダウングレードを強制される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2494 2012-12-14 14:47 2012-06-20 Show GitHub Exploit DB Packet Storm
230369 9.3 危険 シスコシステムズ - Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2493 2012-12-14 14:44 2012-06-20 Show GitHub Exploit DB Packet Storm
230370 7.8 危険 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5416 2012-12-14 14:40 2012-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… Update - CVE-2026-31693 2026-05-3 16:16 2026-04-30 Show GitHub Exploit DB Packet Storm
302 6.5 MEDIUM
Network
- - A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the comp… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7681 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
303 4.3 MEDIUM
Network
- - A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipu… New CWE-22
Path Traversal
CVE-2026-7680 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
304 7.2 HIGH
Network
- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function in versions up to,… New CWE-79
Cross-site Scripting
CVE-2026-5063 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
305 7.3 HIGH
Network
- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… New CWE-287
Improper Authentication
CVE-2026-7679 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
306 6.3 MEDIUM
Network
- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7678 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
307 3.5 LOW
Network
- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7677 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
308 4.3 MEDIUM
Network
- - A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/control… New CWE-22
Path Traversal
CVE-2026-7676 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
309 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. New - CVE-2026-6481 2026-05-3 08:16 2026-05-3 Show GitHub Exploit DB Packet Storm
310 7.3 HIGH
Network
- - A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulatio… New CWE-119
CWE-125
Incorrect Access of Indexable Resource ('Range Error') 
Out-of-bounds Read
CVE-2026-7668 2026-05-3 06:16 2026-05-3 Show GitHub Exploit DB Packet Storm