Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249331 5 警告 houbysoft - QuickShare におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3488 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249332 5 警告 yellosoft - YelloSoft Pinky におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3487 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249333 5 警告 SmarterTools Inc. - SmarterMail の FileStorageUpload.ashx におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3486 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249334 7.5 危険 LightNEasy - LightNEasy の common.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3485 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249335 7.5 危険 LightNEasy - LightNEasy の common.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3484 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249336 7.5 危険 bouzouste - Primitive CMS の cms_write.php における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3483 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249337 6.5 警告 bouzouste - Primitive CMS の cms_write.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3482 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249338 6.8 警告 ApPHP - ApPHP PHP MicroCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3481 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
249339 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2010-3494 2012-03-27 18:42 2009-04-1 Show GitHub Exploit DB Packet Storm
249340 6.8 警告 ApPHP - ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3480 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1131 6.8 MEDIUM
Network 		- - pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … New CWE-295
CWE-306
CWE-863
Improper Certificate Validation 
Missing Authentication for Critical Function
 Incorrect Authorization 		CVE-2026-42312 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1132 8.0 HIGH
Network 		- - Zen is a firefox-based browser. Prior to 1.19.9b, Zen Browser ships a Mozilla Application Resource (MAR) updater (org.mozilla.updater) that has had all MAR signature verification stripped from the Fi… New CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-41431 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1133 - - - jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode VM's data stack tracks its allocation size in a signed int. When the stack grows beyond ≈1 GiB (via deeply nested generator … New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-41257 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1134 5.5 MEDIUM
Local 		- - jq is a command-line JSON processor. In 1.8.1 and earlier, Top-level jq programs loaded from a file with -f are truncated at the first embedded NUL byte on current upstream HEAD. A crafted filter fil… New CWE-158
 Improper Neutralization of Null Byte or NUL Character 		CVE-2026-41256 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1135 - - - jq is a command-line JSON processor. In 1.8.1 and earlier, jv_contains recurses into nested arrays/objects with no depth limit. With a sufficiently nested input structure (built programmatically with… New CWE-674
 Uncontrolled Recursion 		CVE-2026-40612 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1136 - - - An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections … New CWE-502
CWE-918
 Deserialization of Untrusted Data
Server-Side Request Forgery (SSRF)  		CVE-2026-3048 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1137 7.1 HIGH
Network 		- - A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-2393 2026-05-12 03:16 2026-05-12 Show GitHub Exploit DB Packet Storm
1138 5.3 MEDIUM
Network 		- - Zephyr sockets created with `IPPROTO_TLS_1_3` can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to … New CWE-757
Algorithm Downgrade 		CVE-2026-1677 2026-05-12 03:16 2026-05-11 Show GitHub Exploit DB Packet Storm
1139 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_params() In error path, add cx88_alsa_dma_unmap() to release resource acquired by c… Update CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2026-43257 2026-05-12 03:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1140 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory compaction Alpha systems can suffer sporadic user-space crashes and heap corruptio… Update CWE-787
 Out-of-bounds Write 		CVE-2026-43258 2026-05-12 03:10 2026-05-6 Show GitHub Exploit DB Packet Storm