Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248561 5 警告 LifeType - LifeType における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3751 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248562 5 警告 kplaylist - kPlaylist における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3750 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248563 5 警告 MapTools.org - ka-Map における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3749 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248564 5 警告 kamads classifieds - Kamads Classifieds における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3748 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248565 5 警告 jcow - Jcow における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3746 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248566 5 警告 Hycus CMS project - Hycus CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3745 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248567 5 警告 htmlpurifier - HTML Purifier における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3744 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248568 5 警告 Hesk.com - Hesk における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3743 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248569 5 警告 helpcenterlive - HelpCenter Live における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3742 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248570 5 警告 Ganglia - Ganglia における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3741 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
241 7.5 HIGH
Network
- - phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated attackers to enumerate restricted … New CWE-863
 Incorrect Authorization
CVE-2026-46366 2026-05-19 02:25 2026-05-16 Show GitHub Exploit DB Packet Storm
242 7.6 HIGH
Network
- - phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments. Attackers can craf… New CWE-79
Cross-site Scripting
CVE-2026-46367 2026-05-19 02:25 2026-05-16 Show GitHub Exploit DB Packet Storm
243 6.1 MEDIUM
Network
siemens teamcenter A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V2412.0009), Teamcenter V2506 (All … Update CWE-79
Cross-site Scripting
CVE-2026-33862 2026-05-19 02:23 2026-05-12 Show GitHub Exploit DB Packet Storm
244 4.3 MEDIUM
Network
dovecot
open-xchange
dovecot An attacker can cause uncontrolled memory usage with excessive bracing over IMAP. The fix in CVE-2026-27857 was incomplete, only blocking one way of doing this, so there was still another way left op… Update CWE-400
 Uncontrolled Resource Consumption
CVE-2026-42006 2026-05-19 02:22 2026-05-12 Show GitHub Exploit DB Packet Storm
245 8.8 HIGH
Network
fortinet fortindr An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions… Update CWE-89
SQL Injection
CVE-2026-25088 2026-05-19 02:19 2026-05-13 Show GitHub Exploit DB Packet Storm
246 6.5 MEDIUM
Network
fortinet fortideceptor An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2… Update CWE-88
Argument Injection
CVE-2026-25690 2026-05-19 02:17 2026-05-13 Show GitHub Exploit DB Packet Storm
247 6.5 MEDIUM
Network
- - Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that index will crash the server. A simi… New CWE-617
 Reachable Assertion
CVE-2026-8843 2026-05-19 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
248 - - - A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicio… New CWE-94
Code Injection
CVE-2026-45829 2026-05-19 02:16 2026-05-19 Show GitHub Exploit DB Packet Storm
249 9.1 CRITICAL
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encodi… Update CWE-20
CWE-400
CWE-626
 Improper Input Validation 
 Uncontrolled Resource Consumption
 Null Byte Interaction Error (Poison Null Byte)
CVE-2026-42579 2026-05-19 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
250 7.5 HIGH
Network
- - WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batched GraphQL queries with duplicated fields… New CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2021-47959 2026-05-19 02:05 2026-05-16 Show GitHub Exploit DB Packet Storm