Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231121 6.8 警告 phpBB - phpBB 用の SearchIndexer の pbpbb アーカイブにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5418 2012-12-20 18:02 2006-10-20 Show GitHub Exploit DB Packet Storm
231122 7.5 危険 supermod - YaBBSM 用の SuperMod における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5413 2012-12-20 18:02 2006-10-20 Show GitHub Exploit DB Packet Storm
231123 6.2 警告 東芝 - 複数製品に使用される Toshiba Bluetooth ワイアレスデバイスドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5405 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231124 2.6 注意 シマンテック - Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおける重要な情報を取得される脆弱性 - CVE-2006-5404 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
231125 5.1 警告 シマンテック - Norton AntiVirus などの Symantec Automated Support Assistant で使用される ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2006-5403 2012-12-20 18:02 2006-10-5 Show GitHub Exploit DB Packet Storm
231126 7.5 危険 phpmybibli - PHPmybibli における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5402 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231127 7.5 危険 phprecipebook - PHPRecipeBook の classes/Import_MM.class.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5399 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231128 7.5 危険 simplog - Simplog の comments.php における SQL インジェクションの脆弱性 - CVE-2006-5398 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
231129 2.1 注意 X.Org Foundation - X.Org libX11 の Xinput モジュールにおける XCOMPOSEFILE 環境変数によって使用されるファイルが読み込まれる脆弱性 - CVE-2006-5397 2012-12-20 18:02 2006-11-2 Show GitHub Exploit DB Packet Storm
231130 5 警告 xfire - Xfire におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-5391 2012-12-20 18:02 2006-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 - - - Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker knows the email address of the victim they can create and link an unverified Po… New CWE-287
Improper Authentication 		CVE-2026-44166 2026-05-14 03:23 2026-05-13 Show GitHub Exploit DB Packet Storm
612 3.8 LOW
Network 		hono hono Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.18, improper validation of the JWT NumericDate claims exp, nbf, and iat in hono/utils/jwt allows to… New CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-44459 2026-05-14 03:21 2026-05-14 Show GitHub Exploit DB Packet Storm
613 9.1 CRITICAL
Network 		- - Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and … New CWE-287
CWE-697
Improper Authentication
 Incorrect Comparison 		CVE-2026-44196 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
614 9.1 CRITICAL
Network 		- - Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured… New CWE-639
CWE-863
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-42889 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
615 - - - sse-channel is an SSE-implementation which can be used to any node.js http request/response stream. Prior to 4.0.1, implementations that allow user-provided values to be passed to event, retry or id … New CWE-93
CRLF Injection 		CVE-2026-44217 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
616 9.0 CRITICAL
Network 		- - ArcadeDB is a Multi-Model DBMS. Prior to 2.6.4, authenticated users and API tokens scoped to a specific database could read, write, and mutate schema on any other database on the same server. Two dis… New CWE-863
 Incorrect Authorization 		CVE-2026-44221 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
617 - - - DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.3.0, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.3.0. New CWE-791
 Incomplete Filtering of Special Elements 		CVE-2026-44232 2026-05-14 03:21 2026-05-13 Show GitHub Exploit DB Packet Storm
618 - - - WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2, there are critical vulnerabilities affecting WGDashboard that, if exploited, could allow unauthorized parties to access the host file sys… New CWE-20
 Improper Input Validation  		CVE-2026-44343 2026-05-14 03:20 2026-05-13 Show GitHub Exploit DB Packet Storm
619 7.2 HIGH
Network 		- - nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset. Prior to 2.4.1, the nnU-Net Issue Triage workflow in .github/workflows/issue-triage.yml is vulnerable… New - CVE-2026-44246 2026-05-14 03:20 2026-05-13 Show GitHub Exploit DB Packet Storm
620 - - - An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authent… New CWE-424
 Improper Protection of Alternate Path 		CVE-2026-0237 2026-05-14 03:17 2026-05-14 Show GitHub Exploit DB Packet Storm