Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228001	7.5	危険	scripts24	-	Scripts24 iPost および iTGP の go.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3491	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

228002	7.5	危険	phpx	-	PHPX の includes/functions.inc.php の checkCookie 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3489	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

228003	7.5	危険	phpauctions	-	PHPAuction GPL の profile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3487	2012-12-20 18:52	2008-08-6	Show	GitHub Exploit DB Packet Storm

228004	4.3	警告	screwturn	-	ScrewTurn Wiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3483	2012-12-20 18:52	2008-08-5	Show	GitHub Exploit DB Packet Storm

228005	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3457	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

228006	6.4	警告	The phpMyAdmin Project	-	phpMyAdmin におけるなりすましされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-3456	2012-12-20 18:52	2008-07-28	Show	GitHub Exploit DB Packet Storm

228007	4	警告	phpwebgallery	-	PhpWebGallery における他のユーザの電子メールアドレスを取得される脆弱性	CWE-200 情報漏えい	CVE-2008-3451	2012-12-20 18:52	2008-08-4	Show	GitHub Exploit DB Packet Storm

228008	7.5	危険	phpmyrealty	-	PMR の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3445	2012-12-20 18:52	2008-08-4	Show	GitHub Exploit DB Packet Storm

228009	7.5	危険	winzip	-	WinZip における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3442	2012-12-20 18:52	2008-08-1	Show	GitHub Exploit DB Packet Storm

228010	7.5	危険	サン・マイクロシステムズ	-	Sun Java における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-3440	2012-12-20 18:52	2008-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2931	7.5	HIGH Network	wireshark	wireshark	MBIM protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-6519	2026-05-2 01:41	2026-04-30	Show	GitHub Exploit DB Packet Storm

2932	7.5	HIGH Network	wireshark	wireshark	OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-6520	2026-05-2 01:37	2026-04-30	Show	GitHub Exploit DB Packet Storm

2933	7.5	HIGH Network	-	-	Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters. The minify functions mishandled some malformed UTF-8 characters, lead…	CWE-122 CWE-176 Heap-based Buffer Overflow Improper Handling of Unicode Encoding	CVE-2026-7040	2026-05-2 01:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

2934	8.8	HIGH Network	-	-	TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution	CWE-122 Heap-based Buffer Overflow	CVE-2026-5402	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

2935	8.1	HIGH Network	freebsd	freebsd	As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers. The code which expands the array incorrectly calculates its new size when reque…	CWE-122 Heap-based Buffer Overflow	CVE-2026-42512	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

2936	8.1	HIGH Network	freebsd	freebsd	The BOOTP file field is written to the lease file without escaping embedded double-quotes, allowing injection of arbitrary dhclient.conf directives. When the lease file is subsequently re-parsed by …	CWE-149 Improper Neutralization of Quoting Syntax	CVE-2026-42511	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

2937	8.1	HIGH Network	-	-	mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backe…	CWE-89 SQL Injection	CVE-2026-42167	2026-05-2 01:16	2026-04-29	Show	GitHub Exploit DB Packet Storm

2938	8.1	HIGH Network	freebsd	freebsd	When processing the header of an incoming message, libnv failed to properly validate the message size. The lack of validation allows a malicious program to write outside the bounds of a heap allocat…	CWE-122 CWE-130 Heap-based Buffer Overflow Improper Handling of Length Parameter Inconsistency	CVE-2026-35547	2026-05-2 01:16	2026-04-30	Show	GitHub Exploit DB Packet Storm

2939	7.7	HIGH Network	getoutline	outline	Outline is a service that allows for collaborative documentation. The `shares.create` API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-41649	2026-05-2 00:54	2026-04-29	Show	GitHub Exploit DB Packet Storm

2940	9.8	CRITICAL Network	openclaw	openclaw	OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during…	CWE-648 Incorrect Use of Privileged APIs	CVE-2026-41386	2026-05-2 00:52	2026-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed