Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2751	7.5	重要 Network	Vexa AI, Inc.	Vexa	Vexa AI, Inc.のVexaにおける複数の脆弱性	CWE-306 CWE-862	CVE-2026-25058	2026-04-24 11:37	2026-04-20	Show	GitHub Exploit DB Packet Storm

2752	5.8	警告 Network	Vexa AI, Inc.	Vexa	Vexa AI, Inc.のVexaにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-25883	2026-04-24 11:37	2026-04-20	Show	GitHub Exploit DB Packet Storm

2753	6.1	警告 Network	アドビシステムズ	Adobe Connect Adobe Connect Desktop Application	アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-27243	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2754	6.1	警告 Network	アドビシステムズ	Adobe Connect Adobe Connect Desktop Application	アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-27245	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2755	6.1	警告 Network	アドビシステムズ	Adobe Connect Adobe Connect Desktop Application	アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-27246	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2756	10	緊急 Network	アドビシステムズ	Adobe Connect Adobe Connect Desktop Application	アドビのAdobe Connect等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-27303	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2757	4.3	警告 Network	Hytale Modding	HytaleModding Wiki	Hytale ModdingのHytaleModding Wikiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-32736	2026-04-24 11:37	2026-03-18	Show	GitHub Exploit DB Packet Storm

2758	7	重要 Local	libsixel project	libsixel	Hayaki Saito (saitoha)のlibsixelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-33018	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2759	7.1	重要 Local	libsixel project	libsixel	Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性	CWE-125 CWE-190	CVE-2026-33019	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

2760	7.1	重要 Local	libsixel project	libsixel	Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-33020	2026-04-24 11:37	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
141	-		-	-	Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function New	-	CVE-2026-36906	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

142	-		-	-	Vulnerability in Wikimedia Foundation Scribunto. This issue affects Scribunto: from 1.45.0 before 1.45.2. New	CWE-79 Cross-site Scripting	CVE-2026-34089	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

143	8.6	HIGH Network	-	-	In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-critical secrets are hardcoded an… New	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-33362	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

144	7.5	HIGH Network	-	-	In Meari IoT SDK image handling (libmrplayer.so) as observed in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and related white-label apps (<= 1.8.x), baby monitor ".jpgx3" files use reversi… New	CWE-326 Inadequate Encryption Strength	CVE-2026-33361	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

145	7.5	HIGH Network	-	-	In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication, signed URLs, or expiry enforce… New	CWE-862 Missing Authorization	CVE-2026-33359	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

146	7.5	HIGH Network	-	-	In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated call path to openapi-euce.mearic… New	CWE-862 Missing Authorization	CVE-2026-33357	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

147	7.7	HIGH Network	-	-	In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from devices the user does not own. … New	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-33356	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

148	-		-	-	The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script. The script registers the Python … New	-	CVE-2026-31254	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

149	-		-	-	The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechani… New	-	CVE-2026-31253	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm

150	-		-	-	CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component. The framework uses torch.load(… New	-	CVE-2026-31252	2026-05-12 02:16	2026-05-12	Show	GitHub Exploit DB Packet Storm