Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248661 4.3 警告 mark pilgrim - Universal Feed Parser の feedparser.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1157 2012-03-27 18:43 2011-02-15 Show GitHub Exploit DB Packet Storm
248662 6.8 警告 Digium - 複数の Asterisk 製品におけるスタックベースおよびヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1147 2012-03-27 18:43 2011-02-21 Show GitHub Exploit DB Packet Storm
248663 3.3 注意 The PHP Group - PEAR のインストーラにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2011-1144 2012-03-27 18:43 2011-03-2 Show GitHub Exploit DB Packet Storm
248664 5 警告 Wireshark - Wireshark の dissect_ber_choice 関数におけるスタック消費の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1142 2012-03-27 18:43 2011-03-2 Show GitHub Exploit DB Packet Storm
248665 4.3 警告 Wireshark - Wireshark の dissect_6lowpan_iphc 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1138 2012-03-27 18:43 2011-03-1 Show GitHub Exploit DB Packet Storm
248666 5 警告 Simple Machines - SMF の PlushSearch2 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1131 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
248667 7.5 危険 Simple Machines - SMF における SQL インジェクション攻撃を誘発する脆弱性 CWE-20
不適切な入力確認
CVE-2011-1130 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
248668 5 警告 mark pilgrim - Universal Feed Parser の feedparser.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1156 2012-03-27 18:43 2008-01-31 Show GitHub Exploit DB Packet Storm
248669 3.5 注意 Simple Machines - SMF の EditNews 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1129 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
248670 7.5 危険 Simple Machines - SMF の loadUserSettings 関数におけるアクセスを取得される脆弱性 CWE-310
暗号の問題
CVE-2011-1128 2012-03-27 18:43 2011-02-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291 5.8 MEDIUM
Network
- - css_parser is a Ruby CSS parser. Prior to 2.1.0 and 1.22.0, the CSS Parser gem does not validate HTTPS connections, allowing a Man-in-the-Middle (MITM) attacker to inject or modify CSS content when s… New CWE-295
CWE-829
Improper Certificate Validation 
 Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-44312 2026-05-16 04:16 2026-05-15 Show GitHub Exploit DB Packet Storm
292 7.3 HIGH
Network
- - Outline is a service that allows for collaborative documentation. From 0.84.0 to 1.6.1, the Outline comment section permits users to mention other users; however, the backend does not validate or san… Update CWE-79
Cross-site Scripting
CVE-2026-43887 2026-05-16 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
293 - - - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an unauthenticated user can read APISecret from objects/plugins.json.php and use it to call protected API endpoints… Update CWE-200
CWE-862
Information Exposure
 Missing Authorization
CVE-2026-43885 2026-05-16 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
294 5.4 MEDIUM
Network
- - WWBN AVideo is an open source video platform. In versions up to and including 29.0, an authenticated user can configure their own donation-notification webhook URL to point at internal/loopback/metad… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-43879 2026-05-16 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
295 - - - Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in Go Fiber allows a remote attacker to inject arbitrary HTML/JavaScript by supplying Accept: text/html… Update CWE-79
Cross-site Scripting
CVE-2026-42554 2026-05-16 04:16 2026-05-12 Show GitHub Exploit DB Packet Storm
296 7.5 HIGH
Network
- - Flight is an extensible micro-framework for PHP. Prior to 3.18.1, the default error handler Engine::_error() writes the full exception message, exception code, and stack trace (including absolute fil… New CWE-209
Information Exposure Through an Error Message
CVE-2026-42552 2026-05-16 04:16 2026-05-14 Show GitHub Exploit DB Packet Storm
297 - - - Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… New CWE-87
 Improper Neutralization of Alternate XSS Syntax
CVE-2026-42458 2026-05-16 04:16 2026-05-16 Show GitHub Exploit DB Packet Storm
298 6.1 MEDIUM
Network
- - Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Pr… New CWE-601
Open Redirect
CVE-2026-42207 2026-05-16 04:16 2026-05-16 Show GitHub Exploit DB Packet Storm
299 9.8 CRITICAL
Network
- - Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. The endpoint is designed to execute arbitrary Python code provided by the user,… Update CWE-94
Code Injection
CVE-2026-31231 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm
300 8.8 HIGH
Network
snorkel snorkel The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability (CWE-502) in the BaseLabeler.load() method of the BaseLabeler class. The method loads serialized labeler mo… Update CWE-502
 Deserialization of Untrusted Data
CVE-2026-31223 2026-05-16 04:16 2026-05-13 Show GitHub Exploit DB Packet Storm