Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250881 5 警告 Apache Software Foundation - Apache MyFaces の shared/util/StateUtils.java における View State を変更される脆弱性 CWE-310
暗号の問題
CVE-2010-2057 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
250882 9.3 危険 シマンテック - SAVCE などの製品で使用されている AMS または AMS2 の HDNLRSVC.EXE における任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-0111 2012-03-27 18:42 2011-01-26 Show GitHub Exploit DB Packet Storm
250883 7.9 危険 シマンテック - SAVCE などの製品で使用されている Intel Alert Management System におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0110 2012-03-27 18:42 2011-01-26 Show GitHub Exploit DB Packet Storm
250884 5 警告 Pentaho Corporation - Pentaho BI Server における Web トラフィックを傍受される脆弱性 CWE-200
情報漏えい
CVE-2009-5101 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
250885 2.1 注意 Pentaho Corporation - Pentaho BI Server におけるパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2009-5100 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
250886 4.3 警告 Pentaho Corporation - Pentaho BI Server の ViewAction におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-5099 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
250887 5.4 警告 ヒューレット・パッカード - Palm Pre WebOS の LunaSysMgr プロセス におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5098 2012-03-27 18:42 2011-09-13 Show GitHub Exploit DB Packet Storm
250888 6.3 警告 OpenFabrics Alliance - OFED の openibd における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-1693 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
250889 10 危険 The Tor Project - Tor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1676 2012-03-27 18:42 2010-12-20 Show GitHub Exploit DB Packet Storm
250890 9.3 危険 Nullsoft - Winamp の vp6.w5s におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1523 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3221 5.4 MEDIUM
Network
weblate weblate Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DRF API tokens ("wlu_… CWE-613
 Insufficient Session Expiration
CVE-2026-41519 2026-05-12 02:00 2026-05-8 Show GitHub Exploit DB Packet Storm
3222 5.4 MEDIUM
Network
dani-garcia vaultwarden Vaultwarden is a Bitwarden-compatible server written in Rust. In versions 1.35.4 and earlier, the WebAuthn authentication flow in `validate_webauthn_login()` updates persistent credential metadata (1… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2026-31835 2026-05-12 01:59 2026-05-6 Show GitHub Exploit DB Packet Storm
3223 7.5 HIGH
Network
zte zxcloud_irai A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. CWE-134
NVD-CWE-noinfo
Use of Externally-Controlled Format String
CVE-2026-44407 2026-05-12 01:41 2026-05-7 Show GitHub Exploit DB Packet Storm
3224 7.1 HIGH
Network
monetr monetr monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any authenticated user… CWE-209
CWE-770
CWE-918
Information Exposure Through an Error Message
 Allocation of Resources Without Limits or Throttling
Server-Side Request Forgery (SSRF) 
CVE-2026-41644 2026-05-12 01:40 2026-05-7 Show GitHub Exploit DB Packet Storm
3225 7.5 HIGH
Network
thalesgroup ercom_cryptobox Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access c… CWE-280
NVD-CWE-noinfo
Improper Handling of Insufficient Permissions or Privileges 
CVE-2026-6805 2026-05-12 01:37 2026-05-7 Show GitHub Exploit DB Packet Storm
3226 4.7 MEDIUM
Network
- - A weakness has been identified in D-Link DNS-320 2.06B01. This impacts the function cgi_set_host/cgi_set_ntp/cgi_fan_control/cgi_merge_user of the file /cgi-bin/system_mgr.cgi. This manipulation caus… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8273 2026-05-12 01:17 2026-05-11 Show GitHub Exploit DB Packet Storm
3227 6.3 MEDIUM
Network
- - A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-8217 2026-05-12 01:17 2026-05-10 Show GitHub Exploit DB Packet Storm
3228 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2026-21709. Reason: This record is a duplicate of CVE-2026-21709. Notes: All CVE users should reference CVE-2026-21709 instead of this rec… - CVE-2025-63750 2026-05-12 01:17 2026-05-12 Show GitHub Exploit DB Packet Storm
3229 8.1 HIGH
Network
weblate weblate Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial p… CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF) 
CVE-2026-41654 2026-05-12 00:30 2026-05-8 Show GitHub Exploit DB Packet Storm
3230 6.5 MEDIUM
Network
mongodb mongodb An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whe… CWE-476
 NULL Pointer Dereference
CVE-2026-8063 2026-05-12 00:26 2026-05-7 Show GitHub Exploit DB Packet Storm