Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226161 5 警告 phpauction - phpAuction における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-6999 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226162 10 危険 シーメンス - Siemens Gigaset WLAN Camera における許可されていない操作を実行される脆弱性 CWE-310
暗号の問題 		CVE-2008-6993 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226163 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6986 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226164 6.8 警告 Zen Cart - Zen Cart の includes/classes/shopping_cart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6985 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226165 5 警告 phpadultsite - phpAdultSite CMS の index.php における SQL インジェクションの脆弱性 CWE-200
情報漏えい 		CVE-2008-6981 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226166 7.5 危険 phpadultsite - phpAdultSite CMS の as_archives.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6980 2012-12-20 19:10 2009-08-19 Show GitHub Exploit DB Packet Storm
226167 7.5 危険 Pligg - Pligg CMS の submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6968 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226168 7.5 危険 X7 Group - X7 Chat のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6964 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226169 7.5 危険 turnkeyforms - TurnkeyForms Text Link Sales の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6963 2012-12-20 19:10 2009-08-13 Show GitHub Exploit DB Packet Storm
226170 5 警告 x10media - X10media x10 Automatic Mp3 Search Engine Script の download.php における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-6960 2012-12-20 19:10 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1081 7.1 HIGH
Network 		dell idrac10_firmware Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privilege… CWE-522
 Insufficiently Protected Credentials 		CVE-2026-35155 2026-05-2 02:40 2026-04-29 Show GitHub Exploit DB Packet Storm
1082 6.1 MEDIUM
Network 		wso2 identity_server The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding. This allows for the injection of malicious Java… CWE-79
Cross-site Scripting 		CVE-2025-10503 2026-05-2 02:40 2026-04-29 Show GitHub Exploit DB Packet Storm
1083 6.4 MEDIUM
Network 		traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a potential vulnerability in Traefik's Kubernetes CRD provider cross-namespace isolatio… CWE-653
CWE-863
 Improper Isolation or Compartmentalization
 Incorrect Authorization 		CVE-2026-41174 2026-05-2 02:39 2026-05-1 Show GitHub Exploit DB Packet Storm
1084 5.5 MEDIUM
Local 		samsung android Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application. NVD-CWE-noinfo
CVE-2026-21023 2026-05-2 02:39 2026-04-29 Show GitHub Exploit DB Packet Storm
1085 3.7 LOW
Network 		traefik traefik Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is a timing side-channel vulnerability in Traefik's BasicAuth middleware that allows an at… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-41263 2026-05-2 02:37 2026-05-1 Show GitHub Exploit DB Packet Storm
1086 4.3 MEDIUM
Network 		- - A vulnerability has been found in Open5GS up to 2.7.7. This vulnerability affects the function amf_nsmf_pdusession_handle_update_sm_context of the file /src/amf/nsmf-handler.c of the component AMF. T… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7587 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1087 - - - Buffer overflow vulnerability in socketcand 0.4.2 in file socketcand.c in function main allows attackers to cause a denial of service or other unspecified impacts via crafted bus_name. - CVE-2026-37538 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1088 8.1 HIGH
Adjacent 		- - collin80/Open-SAE-J1939 thru commit 744024d4306bc387857dfce439558336806acb06 (2023-03-08) contains an integer underflow leading to out-of-bounds write in Transport Protocol Data Transfer handling. At… - CVE-2026-37537 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1089 8.8 HIGH
Adjacent 		- - miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request. A 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) receives … - CVE-2026-37536 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm
1090 7.1 HIGH
Adjacent 		- - openxc/isotp-c thru commit 5a5d19245f65189202719321facd49ce6f5d46ac (2021-08-09) contains an out-of-bounds read in the ISO-TP Single Frame receive handler, where the 4-bit payload length nibble is us… - CVE-2026-37535 2026-05-2 02:16 2026-05-2 Show GitHub Exploit DB Packet Storm