Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228401 6.4 警告 snom - Snom 320 SIP Phone における任意の電話番号へ発信される脆弱性 - CVE-2007-3440 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228402 5 警告 snom - Snom 320 SIP Phone における不在着信を読まれる脆弱性 - CVE-2007-3439 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228403 9.3 危険 rkd software - RKD Software の BarCodeAx.dll におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3435 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228404 7.5 危険 PluXml - Pluxml の admin/images.php における任意のコードをアップロードおよび実行される脆弱性 - CVE-2007-3432 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228405 6.8 警告 valerio capello - Valerio Capello Dagger - The Cutting Edge r23jan2007 の cal.func.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3431 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228406 7.5 危険 Simple Invoices - Simple Invoices 2007 の index.php における SQL インジェクションの脆弱性 - CVE-2007-3430 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228407 7.5 危険 ZoneO-soft - phpTrafficA における脆弱性 - CVE-2007-3428 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228408 7.5 危険 ZoneO-soft - phpTrafficA の index.php における SQL インジェクションの脆弱性 - CVE-2007-3427 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228409 4.3 警告 ZoneO-soft - phpTrafficA の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3426 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
228410 5 警告 ZoneO-soft - phpTrafficA の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3425 2012-12-20 18:19 2007-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2211 - - - authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either bec… CWE-842
 Placement of User into Incorrect Group 		CVE-2026-6970 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2212 9.8 CRITICAL
Network 		- - A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a man… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7136 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2213 9.8 CRITICAL
Network 		- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2214 9.8 CRITICAL
Network 		- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2215 4.3 MEDIUM
Network 		- - An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL. CWE-601
Open Redirect 		CVE-2026-30346 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2216 4.3 MEDIUM
Network 		- - A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. CWE-22
Path Traversal 		CVE-2026-30462 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2217 8.8 HIGH
Network 		- - Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/setting… CWE-352
 Origin Validation Error 		CVE-2026-38934 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2218 6.1 MEDIUM
Network 		- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter CWE-79
Cross-site Scripting 		CVE-2026-38935 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2219 6.1 MEDIUM
Network 		- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter CWE-79
Cross-site Scripting 		CVE-2026-38936 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
2220 9.8 CRITICAL
Network 		- - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the … CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-7139 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm