Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229031 7.5 危険 v3chat - V3 Chat Live Support の admin/index.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2008-5783 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229032 7.5 危険 zeeways - ZeeMatri の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5782 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
229033 7.5 危険 phpweather - PHP Weather の test.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5771 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229034 4.3 警告 phpweather - PHP Weather の config/make_config.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5770 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229035 7.5 危険 sirium - XOOPS 用の AM Events モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5768 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229036 6.8 警告 phparanoid - PHParanoid におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2008-5758 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229037 3.5 注意 Textpattern - Textpattern の textarea/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-5757 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229038 4.3 警告 WordPress.org - WordPress 用の Page Flip Image Gallery プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-5752 2012-12-20 19:10 2008-12-30 Show GitHub Exploit DB Packet Storm
229039 7.5 危険 Pligg - Pligg CMS の evb/check_url.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5739 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
229040 7.5 危険 PHP-Fusion - PHP-Fusion 用の Team Impact TI Blog System モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-5733 2012-12-20 19:10 2008-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3251 8.1 HIGH
Network
mozilla firefox
thunderbird
Memory safety bugs present in Thunderbird 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitr… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2026-8093 2026-05-12 00:12 2026-05-7 Show GitHub Exploit DB Packet Storm
3252 9.8 CRITICAL
Network
mozilla firefox
thunderbird
Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. CWE-94
Code Injection
CVE-2026-8094 2026-05-12 00:12 2026-05-7 Show GitHub Exploit DB Packet Storm
3253 7.5 HIGH
Network
google android In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed. NVD-CWE-noinfo
CVE-2025-71253 2026-05-12 00:11 2026-05-6 Show GitHub Exploit DB Packet Storm
3254 6.3 MEDIUM
Network
- - A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injec… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8097 2026-05-12 00:11 2026-05-8 Show GitHub Exploit DB Packet Storm
3255 7.3 HIGH
Network
- - A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sq… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8098 2026-05-12 00:11 2026-05-8 Show GitHub Exploit DB Packet Storm
3256 5.3 MEDIUM
Network
- - The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to, and including, 5.5.0 This is due… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-7652 2026-05-12 00:11 2026-05-9 Show GitHub Exploit DB Packet Storm
3257 6.3 MEDIUM
Adjacent
- - A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation leads to missing authe… CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-8185 2026-05-12 00:11 2026-05-9 Show GitHub Exploit DB Packet Storm
3258 5.3 MEDIUM
Network
- - The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions up to, and including… CWE-200
Information Exposure
CVE-2026-8198 2026-05-12 00:11 2026-05-9 Show GitHub Exploit DB Packet Storm
3259 6.3 MEDIUM
Network
- - A weakness has been identified in Akaunting 3.1.21. This issue affects some unknown processing of the file config/dompdf.php of the component Invoice PDF Rendering. Executing a manipulation can lead … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-8193 2026-05-12 00:11 2026-05-10 Show GitHub Exploit DB Packet Storm
3260 4.3 MEDIUM
Network
- - A security vulnerability has been detected in osTicket up to 1.18.3. Impacted is an unknown function of the file include/class.dispatcher.php of the component Dispatcher. The manipulation of the argu… CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization
CVE-2026-8194 2026-05-12 00:11 2026-05-10 Show GitHub Exploit DB Packet Storm