Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251141 10 危険 fanfan - Android 用 Di Long Weibo アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1389 2012-03-8 15:03 2012-03-7 Show GitHub Exploit DB Packet Storm
251142 10 危険 xixun - Android 用 XiXunTianTian アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1388 2012-03-8 14:56 2012-03-7 Show GitHub Exploit DB Packet Storm
251143 10 危険 UANGEL - Android 用 RealTalk アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1387 2012-03-8 14:42 2012-03-7 Show GitHub Exploit DB Packet Storm
251144 10 危険 YouMail - Android 用 YouMail Visual Voicemail Plus アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1386 2012-03-8 14:30 2012-03-7 Show GitHub Exploit DB Packet Storm
251145 10 危険 NetEase - Android 用 NetEase WeiboHD アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1385 2012-03-8 14:28 2012-03-7 Show GitHub Exploit DB Packet Storm
251146 10 危険 NetEase - Android 用 NetEase Pmail アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1384 2012-03-8 14:26 2012-03-7 Show GitHub Exploit DB Packet Storm
251147 10 危険 NetEase - Android 用 NetEase Reader アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1383 2012-03-8 14:25 2012-03-7 Show GitHub Exploit DB Packet Storm
251148 10 危険 NetEase - Android 用 NetEase Youdao Dictionary アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1382 2012-03-8 14:23 2012-03-7 Show GitHub Exploit DB Packet Storm
251149 10 危険 NetEase - Android 用 NetEase CloudAlbum アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1381 2012-03-8 14:10 2012-03-7 Show GitHub Exploit DB Packet Storm
251150 10 危険 NetEase - Android 用 NetEaseWeibo アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2012-1380 2012-03-8 14:08 2012-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3161 8.2 HIGH
Network 		quarkus quarkus Quarkus is a Java framework for building cloud-native applications. In versions prior to 3.20.6.1, 3.27.3.1, 3.33.1.1, 3.35.1.1, 3.34.7, and 3.35.2, a path normalization inconsistency between the sec… CWE-863
 Incorrect Authorization 		CVE-2026-39852 2026-05-9 02:18 2026-05-6 Show GitHub Exploit DB Packet Storm
3162 7.8 HIGH
Local 		- - PHPUnit is a testing framework for PHP. In versions 12.5.21 and 13.1.5, PHPUnit forwards PHP INI settings to child processes (used for isolated/PHPT test execution) as -d name=value command-line argu… CWE-88
CWE-93
Argument Injection
CRLF Injection 		CVE-2026-41570 2026-05-9 02:16 2026-05-9 Show GitHub Exploit DB Packet Storm
3163 8.8 HIGH
Network 		- - NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js. CWE-78
OS Command  		CVE-2025-63705 2026-05-9 02:16 2026-05-8 Show GitHub Exploit DB Packet Storm
3164 9.8 CRITICAL
Network 		phpoffice phpspreadsheet PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0, when t… CWE-502
CWE-918
 Deserialization of Untrusted Data
Server-Side Request Forgery (SSRF)  		CVE-2026-34084 2026-05-9 02:10 2026-05-6 Show GitHub Exploit DB Packet Storm
3165 5.4 MEDIUM
Network 		phpoffice phpspreadsheet PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.3 and earlier, 2.0.0 through 2.1.15, 2.2.0 through 2.4.4, 3.3.0 through 3.10.4, and 4.0.0 through 5.6.0, the HT… CWE-79
Cross-site Scripting 		CVE-2026-35453 2026-05-9 02:08 2026-05-6 Show GitHub Exploit DB Packet Storm
3166 7.5 HIGH
Network 		torproject tor Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009. CWE-837
 Improper Enforcement of a Single, Unique Action 		CVE-2026-44601 2026-05-9 02:07 2026-05-7 Show GitHub Exploit DB Packet Storm
3167 7.5 HIGH
Network 		torproject tor Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006. CWE-476
 NULL Pointer Dereference 		CVE-2026-44602 2026-05-9 02:06 2026-05-7 Show GitHub Exploit DB Packet Storm
3168 9.8 CRITICAL
Network 		frappe erpnext ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI). An attacker with permission to create or edit email templates can inject template expressions that are executed on… CWE-94
Code Injection 		CVE-2026-38431 2026-05-9 02:06 2026-05-6 Show GitHub Exploit DB Packet Storm
3169 8.8 HIGH
Network 		mathjs mathjs Math.js is an extensive math library for JavaScript and Node.js. From version 13.1.0 to before version 15.2.0, arbitrary JavaScript can be executed via the expression parser of mathjs. This issue has… CWE-915
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2026-41139 2026-05-9 02:06 2026-05-7 Show GitHub Exploit DB Packet Storm
3170 6.1 MEDIUM
Network 		frappe erpnext ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine. An attacker with permission to create or edit email templates can inject malicious JavaScript co… CWE-79
Cross-site Scripting 		CVE-2026-38432 2026-05-9 02:05 2026-05-6 Show GitHub Exploit DB Packet Storm