Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228461 7.8 危険 picozip - PicoZip におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2536 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228462 7.8 危険 e-merge GmbH - WinAce におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2535 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228463 10 危険 トレンドマイクロ - Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性 - CVE-2007-2533 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
228464 7.5 危険 tropicalm - Tropicalm Crowell Resource における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2530 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228465 10 危険 トレンドマイクロ - Windows 用の Trend Micro ServerProtect におけるバッファオーバーフローの脆弱性 - CVE-2007-2528 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
228466 9.3 危険 smartcode - SmartCode VNC Manager の VNC Viewer ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2007-2526 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228467 10 危険 トレンドマイクロ - Trend Micro ServerProtect におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2508 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
228468 7.8 危険 treble designs - Treble Designs 1024 CMS の includes/download.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2507 2012-12-20 18:19 2007-05-3 Show GitHub Exploit DB Packet Storm
228469 7.8 危険 Progress Software Corporation - Progress Software Progress の OpenEdge におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2506 2012-12-20 18:19 2007-05-3 Show GitHub Exploit DB Packet Storm
228470 7.8 危険 リアルネットワークス - RealNetworks RealPlayer におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2497 2012-12-20 18:19 2007-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2131 8.8 HIGH
Adjacent 		- - arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS… CWE-121
Stack-based Buffer Overflow 		CVE-2026-41429 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2132 8.4 HIGH
Local 		- - OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a local attacker contr… CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2026-41433 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2133 5.3 MEDIUM
Network 		- - Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users to bypass the TUF signature threshold … CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2026-6966 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2134 5.9 MEDIUM
Network 		- - Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegated signing authority to bypass TU… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-6967 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2135 5.9 MEDIUM
Network 		- - Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to write files outside intended output directories via absolute… CWE-22
Path Traversal 		CVE-2026-6968 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2136 7.8 HIGH
Local 		- - NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges (if they can cause my_GetTe… CWE-427
 Uncontrolled Search Path Element 		CVE-2026-42171 2026-04-28 03:57 2026-04-25 Show GitHub Exploit DB Packet Storm
2137 4.0 MEDIUM
Network 		- - Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response. CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2026-42254 2026-04-28 03:57 2026-04-26 Show GitHub Exploit DB Packet Storm
2138 7.0 HIGH
Local 		- - Successful exploitation of the race condition vulnerability could allow an attacker to trigger a kernel heap overflow, potentially leading to local privilege escalation and granting system-level acce… CWE-362
Race Condition 		CVE-2026-3006 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
2139 - - - An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged authenticated user may access a configuration fi… CWE-282
 Improper Ownership Management 		CVE-2026-3867 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm
2140 - - - An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management inter… CWE-130
 Improper Handling of Length Parameter Inconsistency 		CVE-2026-3868 2026-04-28 03:57 2026-04-27 Show GitHub Exploit DB Packet Storm