Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251561 7.5 危険 Carnegie Mellon University (Project Cyrus)
レッドハット		 - Cyrus IMAPd の NNTP サーバ (nntpd) 内の imap/nntpd.c における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-3372 2011-12-28 11:12 2011-12-24 Show GitHub Exploit DB Packet Storm
251562 6 警告 OpenStack - OpenStack Compute (Nova) におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4596 2011-12-28 11:08 2011-12-23 Show GitHub Exploit DB Packet Storm
251563 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1388 2011-12-27 16:46 2011-12-23 Show GitHub Exploit DB Packet Storm
251564 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1391 2011-12-27 16:45 2011-12-23 Show GitHub Exploit DB Packet Storm
251565 9.3 危険 IBM
Blueberry Software		 - Blueberry BB FlashBack の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1392 2011-12-27 16:44 2011-12-23 Show GitHub Exploit DB Packet Storm
251566 4.3 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4897 2011-12-27 11:17 2011-12-23 Show GitHub Exploit DB Packet Storm
251567 4.3 警告 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4896 2011-12-27 11:13 2011-12-23 Show GitHub Exploit DB Packet Storm
251568 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-4895 2011-12-27 11:10 2011-12-23 Show GitHub Exploit DB Packet Storm
251569 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-4894 2011-12-27 11:06 2011-12-23 Show GitHub Exploit DB Packet Storm
251570 7.6 危険 The Tor Project - Tor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2778 2011-12-27 11:04 2011-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3411 - - - Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container via path traversal. CWE-20
 Improper Input Validation  		CVE-2026-33588 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
3412 - - - Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker container via path traversal. CWE-20
 Improper Input Validation  		CVE-2026-33589 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
3413 7.1 HIGH
Network 		- - Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin users cannot remove t… CWE-863
 Incorrect Authorization 		CVE-2026-41660 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
3414 4.9 MEDIUM
Network 		- - Admidio is an open-source user management solution. Prior to version 5.0.9, the contacts_data.php endpoint uses a weaker permission check (isAdministratorUsers(), requiring only rol_edit_user=true) t… CWE-863
 Incorrect Authorization 		CVE-2026-41657 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
3415 3.5 LOW
Network 		- - Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio's preferences module (database backup, test email, htaccess generation) fire v… CWE-352
 Origin Validation Error 		CVE-2026-41663 2026-05-7 23:51 2026-05-7 Show GitHub Exploit DB Packet Storm
3416 4.3 MEDIUM
Network 		flowiseai flowise A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipulation of the argumen… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8027 2026-05-7 23:50 2026-05-7 Show GitHub Exploit DB Packet Storm
3417 3.7 LOW
Network 		flowiseai flowise A vulnerability was detected in FlowiseAI Flowise up to 3.0.12. This affects the function verify of the file packages/server/src/enterprise/services/account.service.ts of the component Endpoint. Perf… CWE-200
CWE-284
NVD-CWE-noinfo
Information Exposure
Improper Access Control 		CVE-2026-8028 2026-05-7 23:47 2026-05-7 Show GitHub Exploit DB Packet Storm
3418 8.8 HIGH
Network 		- - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Gosoft Software Industry and Trade Ltd. Co. Proticaret E-Commerce allows Cross-Site Scripting (XS… CWE-79
Cross-site Scripting 		CVE-2026-3953 2026-05-7 23:44 2026-05-7 Show GitHub Exploit DB Packet Storm
3419 9.8 CRITICAL
Network 		- - Origin Validation Error vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Lidera… CWE-346
 Origin Validation Error 		CVE-2026-6508 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm
3420 8.3 HIGH
Network 		- - Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc. DivvyDri… CWE-770
CWE-915
 Allocation of Resources Without Limits or Throttling
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2025-14341 2026-05-7 23:42 2026-05-7 Show GitHub Exploit DB Packet Storm