Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248681 6.2 警告 オラクル - Oracle Solaris における bsmconv および bsmunconv の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0539 2012-05-9 19:21 2012-04-17 Show GitHub Exploit DB Packet Storm
248682 6.4 警告 オラクル - Oracle Solaris における libsasl の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1694 2012-05-9 19:17 2012-04-17 Show GitHub Exploit DB Packet Storm
248683 6.6 警告 オラクル - Oracle Solaris におけるカーネルの特権処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-1691 2012-05-9 19:16 2012-04-17 Show GitHub Exploit DB Packet Storm
248684 6.8 警告 オラクル - Oracle iPlanet Web Server における管理コンソールの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0516 2012-05-9 18:56 2012-04-17 Show GitHub Exploit DB Packet Storm
248685 6.8 警告 オラクル - Oracle GlassFish Server における Web コンテナの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0550 2012-05-9 18:54 2012-04-17 Show GitHub Exploit DB Packet Storm
248686 7.2 危険 オラクル - Oracle Grid Engine における sgepasswd の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0523 2012-05-9 18:47 2012-04-17 Show GitHub Exploit DB Packet Storm
248687 9 危険 オラクル - Oracle Grid Engine における qrsh の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0208 2012-05-9 18:39 2012-04-17 Show GitHub Exploit DB Packet Storm
248688 3.2 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools におけるファイル処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0524 2012-05-9 18:28 2012-04-17 Show GitHub Exploit DB Packet Storm
248689 3.5 注意 オラクル - Oracle PeopleSoft Enterprise Portal における Enterprise Portal の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0531 2012-05-9 18:28 2012-04-17 Show GitHub Exploit DB Packet Storm
248690 3.5 注意 オラクル - Oracle PeopleSoft Enterprise PeopleTools における Core の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0529 2012-05-9 18:27 2012-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1251 5.5 MEDIUM
Local
fortinet forticlient A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert at… CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2026-44278 2026-05-16 10:59 2026-05-13 Show GitHub Exploit DB Packet Storm
1252 5.5 MEDIUM
Local
fortinet fortitoken_mobile A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow atta… CWE-926
 Improper Export of Android Application Components
CVE-2026-44279 2026-05-16 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
1253 4.4 MEDIUM
Local
microsoft 365_copilot Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally. CWE-284
NVD-CWE-Other
Improper Access Control
CVE-2026-41100 2026-05-16 10:49 2026-05-13 Show GitHub Exploit DB Packet Storm
1254 8.8 HIGH
Network
microsoft data_formulator Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network. CWE-94
Code Injection
CVE-2026-41094 2026-05-16 10:47 2026-05-13 Show GitHub Exploit DB Packet Storm
1255 9.0 CRITICAL
Network
- - SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a package's plugin.json (and the equivale… CWE-79
CWE-116
Cross-site Scripting
 Improper Encoding or Escaping of Output
CVE-2026-45375 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1256 8.3 HIGH
Network
- - python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell comman… CWE-78
OS Command 
CVE-2026-45369 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1257 7.8 HIGH
Local
saitoha libsixel libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixel_encode_highcolor's allocation size calculation can lead to a heap bu… CWE-122
CWE-190
Heap-based Buffer Overflow
 Integer Overflow or Wraparound
CVE-2026-44636 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1258 5.5 MEDIUM
Local
openimageio openimageio OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check in TGAInput::decode_… CWE-125
Out-of-bounds Read
CVE-2026-43996 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1259 7.8 HIGH
Local
openimageio openimageio OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, softimageinput.cpp:469 (mixed RLE) an… CWE-787
 Out-of-bounds Write
CVE-2026-43904 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm
1260 - - - ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #122, there is a critical SQL Injection (SQLi) vulnerability in ClipBucket, exploitable through the type parameter on the auth… CWE-89
SQL Injection
CVE-2026-42847 2026-05-16 10:16 2026-05-15 Show GitHub Exploit DB Packet Storm