Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228971 7.5 危険 scottmanktelow - Stride における管理者権限を取得される脆脆弱性 CWE-200
情報漏えい
CVE-2007-5432 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228972 7.5 危険 scottmanktelow - Stride における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5430 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228973 4.3 警告 Umisoft - UMI CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5428 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228974 7.5 危険 Tiki Software Community Association - TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-5423 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228975 6.8 警告 quoc-huy - Joomla! 用の Quoc-Huy mp3_allopass コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5412 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228976 6.8 警告 picoflat cms - PicoFlat CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5390 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228977 6.8 警告 webdesktop - WebDesktop における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5388 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228978 6.8 警告 pindorama - Pindorama の active/components/xmlrpc/client.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5387 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228979 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5386 2012-12-20 18:33 2007-10-12 Show GitHub Exploit DB Packet Storm
228980 2.6 注意 サン・マイクロシステムズ - Sun JVM におけるマルチピン DNS リバインド攻撃を実行される脆弱性 CWE-16
CWE-20
CVE-2007-5375 2012-12-20 18:33 2007-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2411 - - - In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix post open error handling Closing a queue doesn't guarantee that all associated page pools are terminated right… - CVE-2026-43174 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2412 - - - In the Linux kernel, the following vulnerability has been resolved: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 The 9FGV0841 has 8 outputs and registers 8 struct clk_hw, make sure ther… - CVE-2026-43175 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2413 - - - In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Fix RPM reference leak in probe error paths Several error paths in ipu6_pci_probe() were jumping directly to out_ipu… - CVE-2026-43177 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2414 - - - In the Linux kernel, the following vulnerability has been resolved: erofs: fix incorrect early exits for invalid metabox-enabled images Crafted EROFS images with metadata compression enabled can tr… - CVE-2026-43179 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2415 - - - In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an error occurs during register_netdev() fo… - CVE-2026-43219 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2416 - - - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait ra… - CVE-2026-43220 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2417 - - - In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: initialise event handler read bytes IPMB doesn't use i2c reads, but the handler needs to set a value. Otherwise an i2… - CVE-2026-43221 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2418 - - - In the Linux kernel, the following vulnerability has been resolved: media: iris: Add missing platform data entries for SM8750 Two platform-data fields for SM8750 were missed: - get_vpu_buffer_si… - CVE-2026-43235 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2419 - - - In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEV_CHANGEMTU event when unregistering slave syzbot is reporting unregister_netdevice: waiting for netdevsim0 t… - CVE-2026-43234 2026-05-6 22:07 2026-05-6 Show GitHub Exploit DB Packet Storm
2420 5.3 MEDIUM
Network
- - The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' WooCommerce API endpoint in all ver… CWE-862
 Missing Authorization
CVE-2026-3208 2026-05-6 22:06 2026-05-6 Show GitHub Exploit DB Packet Storm