Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226921 10 危険 トレンドマイクロ - Trend Micro OfficeScan および Client Server Messaging Security の cgiRecvFile.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-2437 2012-12-20 18:52 2008-09-12 Show GitHub Exploit DB Packet Storm
226922 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2008-2435 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
226923 9.3 危険 トレンドマイクロ - Housecall_ActiveX.dll の Trend Micro HouseCall ActiveX コントロールにおけるクライアントシステム上へ任意のライブラリファイルをダウンロードされる脆弱性 CWE-94
コード・インジェクション
CVE-2008-2434 2012-12-20 18:52 2008-12-23 Show GitHub Exploit DB Packet Storm
226924 7.5 危険 トレンドマイクロ - Trend Micro OfficeScan などの Web 管理コンソールにおけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2008-2433 2012-12-20 18:52 2008-08-20 Show GitHub Exploit DB Packet Storm
226925 9.3 危険 VideoLAN - Windows 上で稼動する VLC Media Player の modules/demux/wav.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2008-2430 2012-12-20 18:52 2008-07-7 Show GitHub Exploit DB Packet Storm
226926 6.8 警告 torrenttrader - TorrentTrader Classic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2428 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
226927 7.5 危険 webslider - Web Slider の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2422 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
226928 4.3 警告 SAP - SAP WAS などの Web GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2421 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
226929 6.8 警告 stunnel - stunnel の OCSP 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-2420 2012-12-20 18:52 2008-05-23 Show GitHub Exploit DB Packet Storm
226930 6.8 警告 sazcart - SazCart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-2411 2012-12-20 18:52 2008-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
861 6.3 MEDIUM
Network
- - A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper au… Update CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7091 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
862 6.3 MEDIUM
Network
- - A vulnerability has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argumen… Update CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7092 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
863 6.3 MEDIUM
Network
- - A vulnerability was found in code-projects Invoice System in Laravel 1.0. Affected by this vulnerability is an unknown functionality of the file /invoice/ of the component Invoice Endpoint. Performin… Update CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7093 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
864 7.3 HIGH
Network
- - A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78. Affected by this issue is some unknown functionality of the file src/puppeteer/in… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-7094 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
865 4.3 MEDIUM
Network
- - A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID leads to cross site s… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7095 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
866 3.7 LOW
Network
- - A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user.php of the component MD5 Hash Handler. This manipulation of the argument Passw… Update CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash
CVE-2026-7103 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
867 6.3 MEDIUM
Network
- - A weakness has been identified in code-projects Invoice System in Laravel 1.0. The impacted element is an unknown function of the file /company. This manipulation of the argument logo causes unrestri… Update CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-7107 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
868 4.3 MEDIUM
Network
- - A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be p… Update CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization
CVE-2026-7108 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
869 3.5 LOW
Network
- - A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cro… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7110 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
870 6.3 MEDIUM
Network
- - A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID causes sql injection… Update CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7114 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm