Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228871 4.3 警告 Wikka Development Team - WikkaWiki の usersettings.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2551 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228872 7.5 危険 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 - CVE-2007-2549 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228873 6.4 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における脆弱性 - CVE-2007-2548 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228874 4.3 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2547 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228875 6.8 警告 Simple Machines - SMF におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2007-2546 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
228876 7.5 危険 XOOPS - XOOPS 用の Flashgames モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2543 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228877 7.5 危険 workbench survival guide - workbench survival guide の header.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2542 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228878 7.5 危険 versado cms - Versado CMS の includes/ajax_listado.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2541 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228879 7.5 危険 pmecms - PMECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2540 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
228880 7.8 危険 runcms - RunCms の show_files 関数における重要な情報 (ファイルの存在およびファイルメタデータ) を取得される脆弱性 - CVE-2007-2539 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1961 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() iavf incorrectly uses real_num_tx_queues for ETH_SS_STATS. Since the v… CWE-787
 Out-of-bounds Write
CVE-2026-31505 2026-04-29 00:06 2026-04-22 Show GitHub Exploit DB Packet Storm
1962 8.5 HIGH
Network
linuxfoundation tekton_pipelines Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. From 1.0.0 to before 1.11.0, the git resolver's revision parameter is passed directly as a positional argume… CWE-88
Argument Injection
CVE-2026-40938 2026-04-29 00:06 2026-04-22 Show GitHub Exploit DB Packet Storm
1963 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devr… CWE-415
 Double Free
CVE-2026-31506 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
1964 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_splice() allocates one smc_spd_priv per … CWE-415
 Double Free
CVE-2026-31507 2026-04-29 00:05 2026-04-22 Show GitHub Exploit DB Packet Storm
1965 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Avoid releasing netdev before teardown completes The patch cited in the Fixes tag below changed the teardown co… NVD-CWE-noinfo
CVE-2026-31508 2026-04-29 00:04 2026-04-22 Show GitHub Exploit DB Packet Storm
1966 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and tx_wq while holding req_lock. … CWE-667
 Improper Locking
CVE-2026-31509 2026-04-29 00:02 2026-04-22 Show GitHub Exploit DB Packet Storm
1967 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Before using sk pointer, check if it is null. Fix the following: K… CWE-476
 NULL Pointer Dereference
CVE-2026-31510 2026-04-29 00:01 2026-04-22 Show GitHub Exploit DB Packet Storm
1968 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the condition checking so mgmt_pending… CWE-416
 Use After Free
CVE-2026-31511 2026-04-28 23:59 2026-04-22 Show GitHub Exploit DB Packet Storm
1969 9.9 CRITICAL
Network
saltcorn saltcorn Saltcorn is an extensible, open source, no-code database application builder. Prior to 1.4.6, 1.5.6, and 1.6.0-beta.5, a SQL injection vulnerability in Saltcorn’s mobile-sync routes allows any authen… CWE-89
SQL Injection
CVE-2026-41478 2026-04-28 23:58 2026-04-25 Show GitHub Exploit DB Packet Storm
1970 7.8 HIGH
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: team: fix header_ops type confusion with non-Ethernet ports Similar to commit 950803f72547 ("bonding: fix type confusion in bond_… CWE-843
Type Confusion
CVE-2026-31502 2026-04-28 23:47 2026-04-22 Show GitHub Exploit DB Packet Storm