Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227161 4.3 警告 snews - SNewsCMS Rus の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1413 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
227162 7.5 危険 phpbp - phpBP の includes/functions/banners-external.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1408 2012-12-20 18:52 2008-03-20 Show GitHub Exploit DB Packet Storm
227163 4.3 警告 Plone Foundation - Plone CMS におけるアカウントへの永久アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-1396 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
227164 7.5 危険 Plone Foundation - Plone CMS におけるログアウトしたセッションを再利用される脆弱性 CWE-287
不適切な認証 		CVE-2008-1395 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
227165 7.5 危険 Plone Foundation - Plone CMS におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-1394 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
227166 10 危険 Plone Foundation - Plone CMS における管理権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-1393 2012-12-20 18:52 2008-03-19 Show GitHub Exploit DB Packet Storm
227167 4.3 警告 s9y - S9Y のインストーラにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1386 2012-12-20 18:52 2008-04-22 Show GitHub Exploit DB Packet Storm
227168 4.3 警告 s9y - S9Y の Top Referrers プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1385 2012-12-20 18:52 2008-04-22 Show GitHub Exploit DB Packet Storm
227169 7.5 危険 ZoneMinder - ZoneMinder における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1381 2012-12-20 18:52 2008-05-1 Show GitHub Exploit DB Packet Storm
227170 6.8 警告 wildmary - wildmary Yap Blog の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1370 2012-12-20 18:52 2008-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1091 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto When the TX queue for espintcp is full, esp_output_tail_tcp will return an error… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-31518 2026-04-29 02:25 2026-04-22 Show GitHub Exploit DB Packet Storm
1092 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() A broken/bored/mean USB host can overflow the skb_shared_info… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-31616 2026-04-29 02:21 2026-04-25 Show GitHub Exploit DB Packet Storm
1093 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly In iptfs_reassem_cont(), IP-TFS attempts to append data to t… Update CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2026-31517 2026-04-29 01:35 2026-04-22 Show GitHub Exploit DB Packet Storm
1094 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with netns teardown A XFRM_MSG_NEWSPDINFO request can queue the per-net work item p… Update CWE-362
Race Condition 		CVE-2026-31516 2026-04-29 01:30 2026-04-22 Show GitHub Exploit DB Packet Storm
1095 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate() syzbot was able to trigger a crash in skb_put() [1] Issue is that pfkey_send_m… Update CWE-476
 NULL Pointer Dereference 		CVE-2026-31515 2026-04-29 01:20 2026-04-22 Show GitHub Exploit DB Packet Storm
1096 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are handled by vfs_iocb_iter_read(). However, … Update NVD-CWE-noinfo
CVE-2026-31514 2026-04-29 01:19 2026-04-22 Show GitHub Exploit DB Packet Storm
1097 7.3 HIGH
Network 		- - The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write w… New CWE-787
 Out-of-bounds Write 		CVE-2026-5435 2026-04-29 01:16 2026-04-28 Show GitHub Exploit DB Packet Storm
1098 - - - Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality. The application fails to properly sanitize uploaded SVG files, allowing a low-priv… New - CVE-2026-38948 2026-04-29 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
1099 - - - Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0. The VerifyHostToken function in logic/jwts.go fails to validate the JWT signature when verifying host tokens. An attack… New - CVE-2026-38651 2026-04-29 01:16 2026-04-29 Show GitHub Exploit DB Packet Storm
1100 9.8 CRITICAL
Network 		- - MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service. After successful Digest authentication in an initial DESCRIBE request, … New CWE-287
Improper Authentication 		CVE-2026-35903 2026-04-29 01:16 2026-04-28 Show GitHub Exploit DB Packet Storm