Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227791 7.2 危険 VirusBlokAda Ltd. - VirusBlokAda Vba32 AntiVirus における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5254 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227792 4.3 警告 webhost automation - Helm におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5251 2012-12-20 18:33 2007-10-6 Show GitHub Exploit DB Packet Storm
227793 4.3 警告 uebimiau - Uebimiau の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5235 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227794 4.6 警告 zomplog - Zomplog の admin/upload_files.php における任意の PHP ファイルを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5231 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227795 7.5 危険 zomplog - Zomplog の admin/upload_files.php における管理アクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-5230 2012-12-20 18:33 2007-10-5 Show GitHub Exploit DB Packet Storm
227796 6.8 警告 poppawid - Poppawid の mail/childwindow.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5221 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227797 9.3 危険 アクシスコミュニケーションズ - AXIX 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-5213 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227798 4.3 警告 アクシスコミュニケーションズ - AXIX 2100 Network Camera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5212 2012-12-20 18:33 2007-10-4 Show GitHub Exploit DB Packet Storm
227799 7.5 危険 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5196 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
227800 6.8 警告 SUSE - SUSE Linux Enterprise Desktop の novell-groupwise-client パッケージにおける資格情報を取得される脆弱性 CWE-200
CWE-310
CVE-2007-5195 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2041 6.3 MEDIUM
Network 		- - A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation res… CWE-287
CWE-288
Improper Authentication
Authentication Bypass Using an Alternate Path or Channel 		CVE-2026-5557 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2042 6.3 MEDIUM
Network 		- - A flaw has been found in PHPGurukul PHPGurukul Online Shopping Portal Project up to 2.1. Impacted is an unknown function of the file /pending-orders.php of the component Parameter Handler. This manip… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5558 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2043 6.3 MEDIUM
Network 		- - A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function _is_safe_ast of the file sandbox.py of the component AST Validation. Such manipu… CWE-791
CWE-1336
 Incomplete Filtering of Special Elements
 Improper Neutralization of Special Elements Used in a Template Engine 		CVE-2026-5559 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2044 6.3 MEDIUM
Network 		- - A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter Handler. Performing … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5560 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2045 6.3 MEDIUM
Network 		- - A vulnerability was determined in Campcodes Complete POS Management and Inventory System up to 4.0.6. This affects an unknown function of the file app/Http/Controllers/SettingsController.php of the c… CWE-74
CWE-707
Injection
 Improper Enforcement of Message or Data Structure 		CVE-2026-5561 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2046 6.3 MEDIUM
Network 		- - A security flaw has been discovered in AutohomeCorp frostmourne up to 1.0. Affected is the function httpTest of the file /api/monitor-api/alarm/previewData of the component Alarm Preview. The manipul… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5563 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2047 7.3 HIGH
Network 		- - A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. … CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5564 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2048 7.3 HIGH
Network 		- - A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter H… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-5565 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2049 8.8 HIGH
Network 		- - A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind re… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-5566 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
2050 3.5 LOW
Network 		- - A vulnerability has been found in Akaunting up to 3.1.21. This issue affects some unknown processing of the component Invoice/Billing. The manipulation of the argument notes leads to cross site scrip… CWE-79
CWE-94
Cross-site Scripting
Code Injection 		CVE-2026-5568 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm