Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229151 6.8 警告 web inhabit - A+ Store E-Commerce の account_login.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5960 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229152 7.5 危険 web inhabit - A+ Store E-Commerce の browse.asp における SQL インジェクションの脆弱性 - CVE-2006-5959 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229153 2.1 注意 xlinesoft - XLineSoft PHPRunner における重要な情報を取得される脆弱性 - CVE-2006-5956 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229154 7.5 危険 ringsworld - phpPeanuts の pntUnit/Inspect.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5948 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229155 7.5 危険 website designs for less - Website Designs for Less Inventory Manager の inventory/display/imager.asp における SQL インジェクションの脆弱性 - CVE-2006-5943 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229156 6.8 警告 website designs for less - Website Designs For Less Inventory Manager の inventory/display/display_results.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5942 2012-12-20 18:02 2006-11-16 Show GitHub Exploit DB Packet Storm
229157 7.5 危険 sitexpress - SiteXpress E-Commerce System の dept.asp における SQL インジェクションの脆弱性 - CVE-2006-5936 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229158 7.5 危険 shopsystems - ShopSystems の index.php における SQL インジェクションの脆弱性 - CVE-2006-5935 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229159 7.5 危険 ultrasite - UltraSite の update.asp における SQL インジェクションの脆弱性 - CVE-2006-5933 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
229160 7.5 危険 phpjobscheduler - Phpjobscheduler の firepjs.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5929 2012-12-20 18:02 2006-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
801 8.1 HIGH
Adjacent 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Syzbot reported a KASAN stack-out-of-bounds read in l2cap_… Update CWE-125
Out-of-bounds Read 		CVE-2026-31513 2026-04-29 01:15 2026-04-22 Show GitHub Exploit DB Packet Storm
802 7.5 HIGH
Network 		linaro op-tee OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. From 3.8.0 to 4.10, in the function e… Update CWE-190
 Integer Overflow or Wraparound 		CVE-2026-33662 2026-04-29 00:48 2026-04-25 Show GitHub Exploit DB Packet Storm
803 8.8 HIGH
Network 		deskflow deskflow Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.138, a remote memory-safety vulnerability in Deskflow's clipboard deserialization allows a connected peer to trigger an out-of-bounds re… Update CWE-120
Classic Buffer Overflow 		CVE-2026-41476 2026-04-29 00:47 2026-04-25 Show GitHub Exploit DB Packet Storm
804 7.8 HIGH
Local 		deskflow deskflow Deskflow is a keyboard and mouse sharing app. In 1.20.0, 1.26.0.134, and earlier, Deskflow daemon runs as SYSTEM and exposes an IPC named pipe with WorldAccessOption enabled. The daemon processes pr… Update CWE-306
CWE-862
Missing Authentication for Critical Function
 Missing Authorization 		CVE-2026-41477 2026-04-29 00:46 2026-04-25 Show GitHub Exploit DB Packet Storm
805 6.1 MEDIUM
Network 		cyberpanel cyberpanel CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows una… Update CWE-79
Cross-site Scripting 		CVE-2026-41472 2026-04-29 00:45 2026-04-25 Show GitHub Exploit DB Packet Storm
806 9.1 CRITICAL
Network 		cyberpanel cyberpanel CyberPanel versions prior to 2.4.4 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers to write arbitrary data to the da… Update CWE-306
Missing Authentication for Critical Function 		CVE-2026-41473 2026-04-29 00:44 2026-04-25 Show GitHub Exploit DB Packet Storm
807 6.5 MEDIUM
Network 		langchain langchain-text-splitters LangChain is a framework for building agents and LLM-powered applications. Prior to langchain-text-splitters 1.1.2, HTMLHeaderTextSplitter.split_text_from_url() validated the initial URL using valid… Update CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41481 2026-04-29 00:43 2026-04-25 Show GitHub Exploit DB Packet Storm
808 9.1 CRITICAL
Network 		budibase budibase Budibase is an open-source low-code platform. Prior to 3.35.4, the authenticated middleware uses unanchored regular expressions to match public (no-auth) endpoint patterns against ctx.request.url. Si… Update CWE-287
Improper Authentication 		CVE-2026-41428 2026-04-29 00:39 2026-04-25 Show GitHub Exploit DB Packet Storm
809 9.1 CRITICAL
Network 		bacnetstack bacnet_stack BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's WritePropertyMultiple service decoder allows … Update CWE-125
Out-of-bounds Read 		CVE-2026-41475 2026-04-29 00:36 2026-04-25 Show GitHub Exploit DB Packet Storm
810 7.5 HIGH
Network 		bacnetstack bacnet_stack BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an off-by-one out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service decod… Update CWE-125
CWE-193
Out-of-bounds Read
 Off-by-one Error 		CVE-2026-41502 2026-04-29 00:35 2026-04-25 Show GitHub Exploit DB Packet Storm