Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226351 4.3 警告 scripts-for-sites - SFS EZ Baby の password.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0532 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
226352 7.5 危険 rhadrix - Rhadrix If-CMS の frame.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0528 2012-12-20 19:10 2009-02-11 Show GitHub Exploit DB Packet Storm
226353 10 危険 phpslash - phpSlash の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-0517 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
226354 6.8 警告 yanocc - YANOCC の check_lang.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-0515 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
226355 7.5 危険 webframe - WebFrame におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-0514 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
226356 7.5 危険 webframe - WebFrame における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2009-0513 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
226357 10 危険 simpleircbot - SimpleIrcBot における脆弱性 CWE-287
不適切な認証
CVE-2009-0492 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
226358 2.1 注意 David Paleino - Wicd の DBus configuration file における Wicd デーモンへのメッセージを受信される脆弱性 CWE-16
環境設定
CVE-2009-0489 2012-12-20 19:10 2009-02-9 Show GitHub Exploit DB Packet Storm
226359 5 警告 Rockwell Automation - Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module の Web インターフェースにおける "内部の Web ページ情報" などを取得される脆弱性 CWE-200
情報漏えい
CVE-2009-0474 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
226360 4.3 警告 vivvo - Vivvo CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-0466 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1661 7.2 HIGH
Network
- - The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_form_page_url' parameter in all versions up to, … CWE-79
Cross-site Scripting
CVE-2026-7332 2026-05-6 22:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1662 6.4 MEDIUM
Network
- - The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0. This is due to insufficient input sanitization on the customer cabinet profi… CWE-79
Cross-site Scripting
CVE-2026-7457 2026-05-6 22:06 2026-05-6 Show GitHub Exploit DB Packet Storm
1663 10.0 CRITICAL
Network
vm2_project vm2 vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError allows attackers to escape the sandbox and run arbitrary code. This issue has been patched in version 3.11.0. CWE-94
CWE-693
Code Injection
 Protection Mechanism Failure
CVE-2026-26332 2026-05-6 21:24 2026-05-5 Show GitHub Exploit DB Packet Storm
1664 8.8 HIGH
Adjacent
dlink dir-605l_firmware D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the s… CWE-798
 Use of Hard-coded Credentials
CVE-2026-42372 2026-05-6 21:20 2026-05-5 Show GitHub Exploit DB Packet Storm
1665 8.8 HIGH
Adjacent
dlink dir-605l_firmware D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the s… CWE-798
 Use of Hard-coded Credentials
CVE-2026-42373 2026-05-6 21:19 2026-05-5 Show GitHub Exploit DB Packet Storm
1666 8.8 HIGH
Adjacent
dlink dir-600l_firmware D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static… CWE-798
 Use of Hard-coded Credentials
CVE-2026-42374 2026-05-6 21:18 2026-05-5 Show GitHub Exploit DB Packet Storm
1667 8.8 HIGH
Adjacent
dlink dir-600l_firmware D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static… CWE-798
 Use of Hard-coded Credentials
CVE-2026-42375 2026-05-6 21:17 2026-05-5 Show GitHub Exploit DB Packet Storm
1668 2.7 LOW
Network
- - HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the … CWE-522
 Insufficiently Protected Credentials
CVE-2025-62345 2026-05-6 21:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1669 8.8 HIGH
Network
- - HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized comma… CWE-77
CWE-351
CWE-451
Command Injection
 Insufficient Type Distinction
 User Interface (UI) Misrepresentation of Critical Information
CVE-2025-31951 2026-05-6 21:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1670 4.3 MEDIUM
Network
- - A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the ar… CWE-404
 Improper Resource Shutdown or Release
CVE-2026-7707 2026-05-6 06:16 2026-05-4 Show GitHub Exploit DB Packet Storm