Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226161 7.5 危険 slimcms - SlimCMS の redirect.php における管理ユーザを作成される脆弱性 CWE-287
不適切な認証 		CVE-2008-5708 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
226162 6.9 警告 verlihub-project - Verlihub のデーモンにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-5706 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
226163 9.3 危険 verlihub-project - Verlihub のデーモンにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5705 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
226164 4.3 警告 Skype Technologies S.A. - Firefox 用の Skype エクステンションにおける任意のデータをクリップボードに上書きされる脆弱性 CWE-DesignError
CVE-2008-5697 2012-12-20 19:10 2008-12-22 Show GitHub Exploit DB Packet Storm
226165 8.5 危険 WordPress.org - WordPress MU および WordPress の wp-admin/options.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5695 2012-12-20 19:10 2008-12-19 Show GitHub Exploit DB Packet Storm
226166 10 危険 sandbox - Sandbox の lib/jpgraph/jpgraph_errhandler.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5694 2012-12-20 19:10 2008-12-19 Show GitHub Exploit DB Packet Storm
226167 6.5 警告 phparanoid - PHParanoid における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5673 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
226168 6.8 警告 phparanoid - PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5672 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
226169 6.8 警告 Textpattern - Textpattern におけるセッションのハイジャック後パスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-5670 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
226170 5 警告 Textpattern - Textpattern のコメントプレビューセクションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2008-5669 2012-12-20 19:10 2008-12-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
31 5.5 MEDIUM
Local 		wireshark wireshark BEEP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-121
Stack-based Buffer Overflow 		CVE-2026-6538 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
32 5.5 MEDIUM
Local 		wireshark wireshark SMB2 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-1325
 Improperly Controlled Sequential Memory Allocation 		CVE-2026-6867 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
33 5.5 MEDIUM
Local 		wireshark wireshark WebSocket protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-1325
 Improperly Controlled Sequential Memory Allocation 		CVE-2026-6869 2026-05-2 03:15 2026-04-30 Show GitHub Exploit DB Packet Storm
34 5.5 MEDIUM
Local 		wireshark wireshark GSM RP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service New CWE-824
 Access of Uninitialized Pointer 		CVE-2026-6870 2026-05-2 03:11 2026-04-30 Show GitHub Exploit DB Packet Storm
35 7.5 HIGH
Network 		apache neethi Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Policy documents can trigger an exponential Cartesian cross-prod… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-42402 2026-05-2 03:08 2026-05-1 Show GitHub Exploit DB Packet Storm
36 7.5 HIGH
Network 		apache neethi Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy references (where Policy A references Policy B which references Po… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-42403 2026-05-2 03:08 2026-05-1 Show GitHub Exploit DB Packet Storm
37 7.2 HIGH
Network 		apache neethi Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When an application explicitly calls the API to retrieve a poli… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-42404 2026-05-2 03:06 2026-05-1 Show GitHub Exploit DB Packet Storm
38 9.8 CRITICAL
Network 		apache mina The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject() was inc… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-42778 2026-05-2 02:55 2026-05-1 Show GitHub Exploit DB Packet Storm
39 9.8 CRITICAL
Network 		apache mina The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches. Here was the original issue description: Apache MINA's AbstractIoBuffer.resolveClass() contains two branches, on… New CWE-502
 Deserialization of Untrusted Data 		CVE-2026-42779 2026-05-2 02:55 2026-05-1 Show GitHub Exploit DB Packet Storm
40 5.9 MEDIUM
Network 		apache airflow Apache Airflow's SMTP provider `SmtpHook` called Python's `smtplib.SMTP.starttls()` without an SSL context, so no certificate validation was performed on the TLS upgrade. A man-in-the-middle between … New CWE-295
Improper Certificate Validation  		CVE-2026-41016 2026-05-2 02:54 2026-04-30 Show GitHub Exploit DB Packet Storm