Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226481 7.5 危険 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4433 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
226482 4.3 警告 rmsoft - Xoops 用の RMSOFT MiniShop モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4432 2012-12-20 18:52 2008-10-3 Show GitHub Exploit DB Packet Storm
226483 5 警告 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-4403 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226484 10 危険 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4402 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
226485 9.3 危険 safer networking - Safer Networking FileAlyzer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-4396 2012-12-20 18:52 2008-10-2 Show GitHub Exploit DB Packet Storm
226486 4.3 警告 ベリサイン - VeriSign Kontiki DMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4393 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
226487 9.3 危険 simba technologies
SAP
- SAP SAPgui の mdrmsap.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2008-4387 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
226488 7.5 危険 rianxosencabos cms - Rianxosencabos CMS における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-4244 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
226489 7.5 危険 softacid - SoftAcid HRS の city.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-4204 2012-12-20 18:52 2008-09-24 Show GitHub Exploit DB Packet Storm
226490 6.9 警告 レッドハット - cman の fence_egenera における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4192 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
881 8.8 HIGH
Network
- - Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus … CWE-59
Link Following
CVE-2026-5161 2026-04-30 00:16 2026-04-30 Show GitHub Exploit DB Packet Storm
882 8.8 HIGH
Network
- - Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus allows Authentication Bypass. This issue affects Pardus: … CWE-93
CRLF Injection
CVE-2026-5140 2026-04-30 00:16 2026-04-29 Show GitHub Exploit DB Packet Storm
883 - - - TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function. - CVE-2026-36841 2026-04-30 00:16 2026-04-30 Show GitHub Exploit DB Packet Storm
884 9.8 CRITICAL
Network
pipecat pipecat Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Versions 0.0.41 through 0.0.93 have a vulnerability in `LivekitFrameSerializer` – an opti… CWE-502
 Deserialization of Untrusted Data
CVE-2025-62373 2026-04-30 00:00 2026-04-24 Show GitHub Exploit DB Packet Storm
885 6.1 MEDIUM
Network
cure53 dompurify DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TA… CWE-79
CWE-183
Cross-site Scripting
 Permissive List of Allowed Inputs
CVE-2026-41240 2026-04-29 23:58 2026-04-24 Show GitHub Exploit DB Packet Storm
886 9.8 CRITICAL
Network
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do_encryption(), introduced by c… CWE-416
 Use After Free
CVE-2026-31533 2026-04-29 23:51 2026-04-24 Show GitHub Exploit DB Packet Storm
887 7.5 HIGH
Network
openclaw openclaw OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window. Remote attackers can submit… CWE-799
 Improper Control of Interaction Frequency
CVE-2026-41346 2026-04-29 23:44 2026-04-24 Show GitHub Exploit DB Packet Storm
888 5.4 MEDIUM
Network
openclaw openclaw OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord slash command and autocomplete paths that fail to enforce group DM channel allowlist restrictions. Authorized Disco… CWE-863
 Incorrect Authorization
CVE-2026-41348 2026-04-29 23:41 2026-04-24 Show GitHub Exploit DB Packet Storm
889 8.8 HIGH
Network
openclaw openclaw OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter. Remote attackers can exploit this to … CWE-862
 Missing Authorization
CVE-2026-41349 2026-04-29 23:40 2026-04-24 Show GitHub Exploit DB Packet Storm
890 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU Reject synchronizing vCPU state to its associated VM… NVD-CWE-noinfo
CVE-2026-31593 2026-04-29 23:29 2026-04-25 Show GitHub Exploit DB Packet Storm