Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228111 7.5 危険 sky gunning - MySpeach の up.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0498 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228112 6.8 警告 upload-service - Upload-Service の upload/top.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0497 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228113 10 危険 phpsherpa - PhpSherpa の include/config.inc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0495 2012-12-20 18:19 2007-01-25 Show GitHub Exploit DB Packet Storm
228114 7.5 危険 webSPELL - webSPELL の gallery.php における SQL インジェクションの脆弱性 - CVE-2007-0492 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
228115 6.8 警告 sky gunning - Sky GUNNING MySpeach の up.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0491 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
228116 6.8 警告 visohotlink - VisoHotlink の includes/functions.visohotlink.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0489 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
228117 7.5 危険 webchat.org - WebChat の defines.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0485 2012-12-20 18:19 2007-01-24 Show GitHub Exploit DB Packet Storm
228118 4.6 警告 サン・マイクロシステムズ - Sun Ray Server Software の cgi-bin/main における utadmin パスワードを取得される脆弱性 - CVE-2007-0482 2012-12-20 18:19 2007-01-23 Show GitHub Exploit DB Packet Storm
228119 4.4 警告 smb4k - Smb4K の utilities/smb4k_*.cpp におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-0475 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
228120 3.3 注意 smb4k - Smb4K における任意のプロセスを停止される脆弱性 - CVE-2007-0474 2012-12-20 18:19 2007-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1161 4.3 MEDIUM
Network
- - A vulnerability was found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /modmemberinfo.php of the component Parameter Handler. Performing a manipu… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-5541 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1162 4.3 MEDIUM
Network
- - A vulnerability was determined in code-projects Simple Laundry System 1.0. Impacted is an unknown function of the file /modstaffinfo.php of the component Parameter Handler. Executing a manipulation o… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-5542 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1163 6.3 MEDIUM
Network
- - A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3. The affected element is an unknown function of the file /admin/yesterday-reg-users.php. The mani… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5543 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1164 8.8 HIGH
Network
- - A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument … CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-5544 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1165 6.3 MEDIUM
Network
- - A flaw has been found in Campcodes Complete Online Learning Management System 1.0. This impacts the function add_lesson of the file /application/models/Crud_model.php. This manipulation causes unrest… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-5546 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1166 7.3 HIGH
Network
- - A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component Parameter Handler. T… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5551 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1167 6.3 MEDIUM
Network
- - A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1. This issue affects some unknown processing of the file /sub-category.php of the component Parameter Handler. This mani… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5552 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1168 6.3 MEDIUM
Network
- - A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5553 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1169 7.3 HIGH
Network
- - A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/pro… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5554 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm
1170 7.3 HIGH
Network
- - A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Param… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-5555 2026-04-25 03:14 2026-04-5 Show GitHub Exploit DB Packet Storm