Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230991 5.4 警告 plantronic - Plantronic Headset の Bluetooth スタックにおける許可されていない組み合わせ操作を実行される脆弱性 - CVE-2006-6896 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230992 2.9 注意 sony ericsson - Sony Ericsson T60 の Bluetooth スタックにおける許可されていない問い合わせ応答へのアクセス権を取得される脆弱性 - CVE-2006-6895 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230993 10 危険 spine - SPINE における脆弱性 - CVE-2006-6894 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230994 5 警告 The Tor Project - Tor における非表示サービスの IP アドレスを特定される脆弱性 - CVE-2006-6893 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230995 5 警告 vz forum - Adp Forum における管理者アカウント名などを取得される脆弱性 - CVE-2006-6891 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230996 7.5 危険 voc-project - Voodoo chat におけるパスワードをダウンロードされる脆弱性 - CVE-2006-6890 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230997 5 警告 p-news - P-News における管理者アカウント名などを取得される脆弱性 - CVE-2006-6888 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230998 5 警告 phpwcms - phpwcms における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2006-6886 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
230999 9.3 危険 winzip - WinZip 用の WZFILEVIEW.FileViewCtrl.61 ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-6884 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
231000 7.5 危険 stavros markou - ATMEL Linux PCI PCMCIA USB Drivers drivers の cofvnet.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-6881 2012-12-20 18:02 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 9.8 CRITICAL
Network
- - The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code execution. When a user … New CWE-94
Code Injection
CVE-2026-31217 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
942 8.8 HIGH
Network
- - The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The _parse_op_part() function in query.py uses the unsafe eval() function t… New CWE-94
Code Injection
CVE-2026-31225 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
943 9.8 CRITICAL
Network
- - The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities. The vulnerabi… New CWE-78
OS Command 
CVE-2026-31226 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
944 9.8 CRITICAL
Network
- - The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe ev… New CWE-94
Code Injection
CVE-2026-31228 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
945 9.8 CRITICAL
Network
- - Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a C… New CWE-416
 Use After Free
CVE-2026-45185 2026-05-14 00:52 2026-05-13 Show GitHub Exploit DB Packet Storm
946 9.8 CRITICAL
Network
- - The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserialization vulnerability (CWE-502). The s… New CWE-502
 Deserialization of Untrusted Data
CVE-2026-31214 2026-05-14 00:51 2026-05-13 Show GitHub Exploit DB Packet Storm
947 - - - The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function def… New - CVE-2026-31236 2026-05-14 00:48 2026-05-13 Show GitHub Exploit DB Packet Storm
948 8.0 HIGH
Network
- - An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file. New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2023-27753 2026-05-14 00:48 2026-05-13 Show GitHub Exploit DB Packet Storm
949 5.4 MEDIUM
Network
- - An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter through a crafted GET request. New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2023-30059 2026-05-14 00:48 2026-05-13 Show GitHub Exploit DB Packet Storm
950 6.5 MEDIUM
Network
- - GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method. During project execution, when the system… Update CWE-78
OS Command 
CVE-2026-31246 2026-05-14 00:47 2026-05-12 Show GitHub Exploit DB Packet Storm