Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228301 5 警告 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4403 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228302 10 危険 トレンドマイクロ - Trend Micro OfficeScan のサーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4402 2012-12-20 18:52 2008-09-30 Show GitHub Exploit DB Packet Storm
228303 9.3 危険 safer networking - Safer Networking FileAlyzer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-4396 2012-12-20 18:52 2008-10-2 Show GitHub Exploit DB Packet Storm
228304 4.3 警告 ベリサイン - VeriSign Kontiki DMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4393 2012-12-20 18:52 2008-10-7 Show GitHub Exploit DB Packet Storm
228305 9.3 危険 simba technologies
SAP		 - SAP SAPgui の mdrmsap.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4387 2012-12-20 18:52 2008-11-10 Show GitHub Exploit DB Packet Storm
228306 7.5 危険 rianxosencabos cms - Rianxosencabos CMS における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4244 2012-12-20 18:52 2008-09-25 Show GitHub Exploit DB Packet Storm
228307 7.5 危険 softacid - SoftAcid HRS の city.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4204 2012-12-20 18:52 2008-09-24 Show GitHub Exploit DB Packet Storm
228308 6.9 警告 レッドハット - cman の fence_egenera における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4192 2012-12-20 18:52 2008-09-29 Show GitHub Exploit DB Packet Storm
228309 10 危険 TYPO3 Association - TYPO3 Secure Directory エクステンションにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-4188 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
228310 4.3 警告 proactive cms - ProActive CMS の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4187 2012-12-20 18:52 2008-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3031 10.0 CRITICAL
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_gvret.cpp, the length field in GVRET binary data is not properly validated, allowing remote attackers t… CWE-121
Stack-based Buffer Overflow 		CVE-2026-37541 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3032 8.8 HIGH
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_pcap.cpp , the parser's phdr.len field is not properly validated, allowing remote attackers to cause a … CWE-121
Stack-based Buffer Overflow 		CVE-2026-42468 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3033 8.6 HIGH
Network 		- - Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005. In canformat_canswitch.cpp the parser does not properly validate a CANswitch DLC value, allowing remote attackers to… CWE-121
Stack-based Buffer Overflow 		CVE-2026-42469 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3034 6.1 MEDIUM
Network 		- - Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly sanitize user-suppli… CWE-79
Cross-site Scripting 		CVE-2025-69606 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3035 6.5 MEDIUM
Network 		- - A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request. CWE-77
Command Injection 		CVE-2026-26461 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3036 7.5 HIGH
Network 		- - An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (bgpd/bgp_flowspec_util.c) of FRRouting (FRR) stable/10.0 allows attackers to cause a Denial of Service (DoS) … CWE-787
 Out-of-bounds Write 		CVE-2026-37457 2026-05-8 00:15 2026-05-2 Show GitHub Exploit DB Packet Storm
3037 6.5 MEDIUM
Network 		- - goshs is a SimpleHTTPServer written in Go. Prior to version 2.0.2, the PUT upload handler (httpserver/updown.go) lacks the CSRF token validation that was added to the POST upload handler during the C… CWE-352
 Origin Validation Error 		CVE-2026-42091 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
3038 - - - Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can upload an SVG file with XSS. The method POST /v1/fi… CWE-79
Cross-site Scripting 		CVE-2026-42138 2026-05-8 00:15 2026-05-5 Show GitHub Exploit DB Packet Storm
3039 8.8 HIGH
Network 		- - The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authentic… CWE-78
OS Command  		CVE-2026-31195 2026-05-8 00:15 2026-05-6 Show GitHub Exploit DB Packet Storm
3040 8.8 HIGH
Network 		- - The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing aut… CWE-78
OS Command  		CVE-2026-31196 2026-05-8 00:15 2026-05-6 Show GitHub Exploit DB Packet Storm