Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2661 6.1 警告
Network 		XWiki xwiki XWikiのxwikiにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-40105 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
2662 6.1 警告
Network 		Prometheus Prometheus Prometheusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40179 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
2663 7.5 重要
Network 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-40192 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
2664 8.2 重要
Network 		maddy project maddy maddy projectのmaddyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-40193 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
2665 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40244 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
2666 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40250 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
2667 6.1 警告
Local 		openCryptoki Project openCryptoki openCryptoki ProjectのopenCryptokiにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40253 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
2668 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2026-40260 2026-04-24 11:41 2026-04-17 Show GitHub Exploit DB Packet Storm
2669 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-269
CWE-863
CVE-2026-40291 2026-04-24 11:41 2026-04-14 Show GitHub Exploit DB Packet Storm
2670 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおける複数の脆弱性 CWE-345
CWE-434
CWE-79
CVE-2026-40487 2026-04-24 11:41 2026-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
231 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.… Update NVD-CWE-noinfo
CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2026-8091 2026-05-12 00:20 2026-05-7 Show GitHub Exploit DB Packet Storm
232 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have… Update CWE-125
CWE-416
CWE-787
Out-of-bounds Read
 Use After Free
 Out-of-bounds Write 		CVE-2026-8092 2026-05-12 00:16 2026-05-7 Show GitHub Exploit DB Packet Storm
233 7.5 HIGH
Network 		google android In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Update NVD-CWE-noinfo
CVE-2025-71251 2026-05-12 00:13 2026-05-6 Show GitHub Exploit DB Packet Storm
234 7.5 HIGH
Network 		google android In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Update NVD-CWE-noinfo
CVE-2025-71252 2026-05-12 00:13 2026-05-6 Show GitHub Exploit DB Packet Storm
235 8.1 HIGH
Network 		mozilla firefox
thunderbird 		Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitr… Update CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2026-8093 2026-05-12 00:12 2026-05-7 Show GitHub Exploit DB Packet Storm
236 9.8 CRITICAL
Network 		mozilla firefox
thunderbird 		Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. Update CWE-94
Code Injection 		CVE-2026-8094 2026-05-12 00:12 2026-05-7 Show GitHub Exploit DB Packet Storm
237 7.5 HIGH
Network 		google android In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. Update NVD-CWE-noinfo
CVE-2025-71253 2026-05-12 00:11 2026-05-6 Show GitHub Exploit DB Packet Storm
238 6.3 MEDIUM
Network 		- - A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injec… Update CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8097 2026-05-12 00:11 2026-05-8 Show GitHub Exploit DB Packet Storm
239 7.3 HIGH
Network 		- - A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sq… Update CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-8098 2026-05-12 00:11 2026-05-8 Show GitHub Exploit DB Packet Storm
240 5.3 MEDIUM
Network 		- - The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to, and including, 5.5.0 This is due… New CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2026-7652 2026-05-12 00:11 2026-05-9 Show GitHub Exploit DB Packet Storm