Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228721	7.5	危険	PreProject.com	-	Pre Shopping Mall における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6232	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228722	7.5	危険	PreProject.com	-	Pre Classified Listing PHP における認証を回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6231	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228723	7.5	危険	PreProject.com	-	Pre Projects Pre Podcast Portal の Tour.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6230	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228724	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls における管理アクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2008-6228	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228725	7.5	危険	PreProject.com	-	Pre Multi-Vendor Shopping Malls の buyer_detail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6227	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228726	6.8	警告	PreProject.com	-	Pre Projects PHP Auto Listings Script の moreinfo.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6226	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228727	7.5	危険	samelinux	-	WOTW の visualizza.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6224	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228728	7.5	危険	wotw	-	WOTW の visualizza.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6223	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228729	7.5	危険	Cafuego	-	SDMS の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6220	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

228730	4.3	警告	php-stats	-	Php-Stats の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6212	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3241	6.1	MEDIUM Network	-	-	Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.	CWE-79 Cross-site Scripting	CVE-2025-67202	2026-05-9 08:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

3242	9.8	CRITICAL Network	-	-	NPM package next-npm-version1.0.1 is vulnerable to Command injection.	CWE-94 Code Injection	CVE-2025-63706	2026-05-9 08:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

3243	9.8	CRITICAL Network	-	-	npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2025-63703	2026-05-9 08:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

3244	9.1	CRITICAL Network	-	-	FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, the /user-setup/{hash} endpoint accepts a 60-character random invite_hash to set a new use…	CWE-613 Insufficient Session Expiration	CVE-2026-41902	2026-05-9 07:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

3245	9.8	CRITICAL Network	-	-	NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2025-63704	2026-05-9 07:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

3246	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In that case, the all…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43225	2026-05-9 06:22	2026-05-6	Show	GitHub Exploit DB Packet Storm

3247	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super …	CWE-617 Reachable Assertion	CVE-2026-43228	2026-05-9 06:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

3248	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfully but fails to su…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43223	2026-05-9 06:14	2026-05-6	Show	GitHub Exploit DB Packet Storm

3249	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_area_dma() fails, which could only happe…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43224	2026-05-9 06:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

3250	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as both a clocksource and a clocke…	NVD-CWE-noinfo	CVE-2026-43227	2026-05-9 06:11	2026-05-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed