Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228721 9.3 危険 シマンテック - Norton 360 などの Symantec Norton 製品の AutoFix Support Tool ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0312 2012-12-20 18:34 2008-04-2 Show GitHub Exploit DB Packet Storm
228722 6.9 警告 SCO - SCO UnixWare の pkgadd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-0310 2012-12-20 18:34 2008-02-27 Show GitHub Exploit DB Packet Storm
228723 6.8 警告 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0309 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
228724 7.1 危険 シマンテック - Symantec Scan Engine を含む特定の Symantec アンチウイルス製品で使用される Symantec Decomposer におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-0308 2012-12-20 18:34 2008-02-26 Show GitHub Exploit DB Packet Storm
228725 9.3 危険 SAP - SAP MaxDB の vserver における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2008-0307 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
228726 6.9 警告 SAP - SAP MaxDB の sdbstarter における任意のコマンドを実行される脆弱性 CWE-DesignError
CVE-2008-0306 2012-12-20 18:34 2008-03-11 Show GitHub Exploit DB Packet Storm
228727 4.3 警告 Python Software Foundation - Paramiko の common.py における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2008-0299 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
228728 10 危険 VideoLAN - Windows 上で稼動する VideoLAN VLC Media Player の libaccess_realrtsp プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0296 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
228729 8.5 危険 VideoLAN - VideoLAN VLC Media Player で使用される Xine ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0295 2012-12-20 18:34 2008-01-16 Show GitHub Exploit DB Packet Storm
228730 6.8 警告 visionburst - VisionBurst vcart における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-0287 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2601 6.3 MEDIUM
Network 		- - A vulnerability was identified in janeczku Calibre-Web up to 0.6.26. The impacted element is the function generate_auth_token of the file cps/kobo_auth.py of the component Endpoint. Such manipulation… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-7709 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
2602 7.3 HIGH
Network 		- - A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Perform… CWE-287
Improper Authentication 		CVE-2026-7710 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
2603 6.5 MEDIUM
Network 		- - A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This … CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function 		CVE-2026-7714 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
2604 6.3 MEDIUM
Network 		- - A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of the component Kobo… CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization 		CVE-2026-7713 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
2605 7.3 HIGH
Network 		- - A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpo… CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-7733 2026-05-6 04:11 2026-05-4 Show GitHub Exploit DB Packet Storm
2606 4.3 MEDIUM
Network 		- - A security flaw has been discovered in Open5GS up to 2.7.7. Affected is the function udm_nudr_dr_handle_subscription_authentication of the file /src/udm/nudr-handler.c of the component authentication… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7779 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
2607 4.3 MEDIUM
Network 		- - A weakness has been identified in Open5GS up to 2.7.7. Affected by this vulnerability is the function udm_state_operational of the file /src/udm/udm-sm.c of the component smf-registrations Endpoint. … CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7780 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
2608 4.3 MEDIUM
Network 		- - A security vulnerability has been detected in Open5GS up to 2.7.7. Affected by this issue is the function udm_nudm_uecm_handle_amf_registration_update of the file /src/udm/nudm-handler.c of the compo… CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7781 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
2609 6.3 MEDIUM
Network 		- - A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The mani… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7782 2026-05-6 04:10 2026-05-5 Show GitHub Exploit DB Packet Storm
2610 - - - An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL execution in the backend. … CWE-89
SQL Injection 		CVE-2026-5394 2026-05-6 03:16 2026-04-28 Show GitHub Exploit DB Packet Storm