Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228681	10	危険	Simple DirectMedia Layer	-	SDL_image の IMG_lbm.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0544	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

228682	7.5	危険	PreProject.com	-	Pre Dynamic Institution における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0543	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

228683	4.3	警告	trixbox	-	trixbox におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0540	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

228684	6.8	警告	phpip	-	phpIP Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0538	2012-12-20 18:34	2008-02-1	Show	GitHub Exploit DB Packet Storm

228685	4.3	警告	softcart	-	SoftCart の SoftCart.exe におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0523	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

228686	7.5	危険	WordPress.org	-	WordPress 用の WassUp プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0520	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

228687	9.3	危険	SQLiteManager	-	SQLiteManager の spaw/dialogs/confirm.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-0516	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

228688	7.8	危険	Phpcms	-	phpCMS の parser/include/class.cache_phpcms.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-0513	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

228689	6.8	警告	WordPress.org	-	WordPress 用の Dean's Permalinks Migration プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-0508	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

228690	7.5	危険	WordPress.org	-	WordPress 用の AdServe プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-0507	2012-12-20 18:34	2008-01-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2621	2.6	LOW Adjacent	-	-	A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the c…	CWE-362 CWE-367 Race Condition Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-7846	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2622	2.6	LOW Adjacent	-	-	A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py …	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-7845	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2623	6.3	MEDIUM Adjacent	-	-	A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete_file of the file l…	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-7844	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2624	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Trans…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-32689	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2625	9.8	CRITICAL Network	-	-	Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file…	CWE-122 Heap-based Buffer Overflow	CVE-2025-70067	2026-05-6 01:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

2626	4.9	MEDIUM Network	sonicwall	sonicos	A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.	CWE-121 Stack-based Buffer Overflow	CVE-2026-0206	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

2627	6.8	MEDIUM Adjacent	sonicwall	sonicos	A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.	CWE-35 Path Traversal: '.../...//'	CVE-2026-0205	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

2628	8.0	HIGH Adjacent	sonicwall	sonicos	A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.	CWE-306 CWE-1390 Missing Authentication for Critical Function Weak Authentication	CVE-2026-0204	2026-05-6 01:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

2629	5.5	MEDIUM Local	wireshark	wireshark	IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4	CWE-476 NULL Pointer Dereference	CVE-2026-6525	2026-05-6 00:42	2026-05-2	Show	GitHub Exploit DB Packet Storm

2630	7.8	HIGH Local	entechtaiwan	tvicport	An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.	CWE-20 CWE-269 Improper Input Validation Improper Privilege Management	CVE-2026-30769	2026-05-5 23:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed