Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250631 7.5 危険 Netshine Software - Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7302 2012-02-9 11:01 2008-06-27 Show GitHub Exploit DB Packet Storm
250632 7.5 危険 Sclek - jSite の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-7301 2012-02-9 11:00 2011-10-5 Show GitHub Exploit DB Packet Storm
250633 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
250634 2.1 注意 Apache Software Foundation - Apache JServ における JDBC パスワードまたはその他の重要な情報を見つけられる脆弱性 CWE-16
環境設定
CVE-2000-1247 2012-02-9 10:58 2011-10-5 Show GitHub Exploit DB Packet Storm
250635 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1007 2012-02-8 16:35 2012-02-7 Show GitHub Exploit DB Packet Storm
250636 4.3 警告 Apache Software Foundation - Apache Struts におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1006 2012-02-8 16:34 2012-02-7 Show GitHub Exploit DB Packet Storm
250637 10 危険 シマンテック - Symantec pcAnywhere 製品におけるクライアントへアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2012-0290 2012-02-8 16:33 2012-01-24 Show GitHub Exploit DB Packet Storm
250638 7.1 危険 IBM - IBM AIX の TCP 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-0194 2012-02-8 16:28 2012-02-3 Show GitHub Exploit DB Packet Storm
250639 10 危険 Broadwin - Advantech/BroadWin WebAccess の webvrpcs.exe における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4041 2012-02-8 16:27 2012-02-6 Show GitHub Exploit DB Packet Storm
250640 5 警告 Opera Software ASA - Opera における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-1003 2012-02-8 16:18 2012-02-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2711 9.8 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-190
 Integer Overflow or Wraparound
CVE-2026-42217 2026-05-9 02:01 2026-05-7 Show GitHub Exploit DB Packet Storm
2712 8.8 HIGH
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-190
 Integer Overflow or Wraparound
CVE-2026-41142 2026-05-9 02:00 2026-05-7 Show GitHub Exploit DB Packet Storm
2713 9.8 CRITICAL
Network
hitachi virtual_storage_one_block OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28. This issue affects Hitachi Virtual Storage Platform On… CWE-78
OS Command 
CVE-2025-9661 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
2714 7.8 HIGH
Local
zte zxcloud_irai ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privi… CWE-427
 Uncontrolled Search Path Element
CVE-2026-44406 2026-05-9 01:59 2026-05-7 Show GitHub Exploit DB Packet Storm
2715 9.1 CRITICAL
Network
openexr openexr OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3… CWE-125
Out-of-bounds Read
CVE-2026-42216 2026-05-9 01:56 2026-05-7 Show GitHub Exploit DB Packet Storm
2716 7.8 HIGH
Local
libreoffice libreoffice Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters. This issue affects LibreOffice: from 26.2 before 26.2… CWE-787
 Out-of-bounds Write
CVE-2026-4430 2026-05-9 01:48 2026-05-7 Show GitHub Exploit DB Packet Storm
2717 6.3 MEDIUM
Network
- - In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is never populated (NULL for every ARQ), da… CWE-282
 Improper Ownership Management
CVE-2026-40214 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
2718 7.4 HIGH
Network
- - OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints. This unconditionally authorizes any request carrying a valid Keystone token regardless… CWE-863
 Incorrect Authorization
CVE-2026-40213 2026-05-9 01:16 2026-05-8 Show GitHub Exploit DB Packet Storm
2719 7.3 HIGH
Network
- - This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related metadata from any tenant. Due to t… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-6411 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm
2720 8.8 HIGH
Network
- - OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3, a remote code execution (RCE) vulnerability was identified in the OpenLearnX code execution envir… CWE-78
CWE-94
CWE-250
CWE-284
CWE-693
OS Command 
Code Injection
 Execution with Unnecessary Privileges
Improper Access Control
 Protection Mechanism Failure
CVE-2026-41900 2026-05-9 01:08 2026-05-8 Show GitHub Exploit DB Packet Storm