Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229531	6	警告	sitebar	-	SiteBar の translator.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5693	2012-12-20 18:33	2007-10-29	Show	GitHub Exploit DB Packet Storm

229532	4.3	警告	sitebar	-	SiteBar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5692	2012-12-20 18:33	2007-10-29	Show	GitHub Exploit DB Packet Storm

229533	4.9	警告	rPath, Inc	-	rPath Linux の initscripts における認証試行の重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-5686	2012-12-20 18:33	2007-10-11	Show	GitHub Exploit DB Packet Storm

229534	5	警告	serverkit	-	shttp の safe_path 関数におけるディレクトリトラバーサル攻撃を実行される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5685	2012-12-20 18:33	2007-10-28	Show	GitHub Exploit DB Packet Storm

229535	7.5	危険	Tiki Software Community Association	-	TikiWiki におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5684	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

229536	4.3	警告	Tiki Software Community Association	-	TikiWiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5683	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

229537	7.5	危険	Tiki Software Community Association	-	TikiWiki の tiki-graph_formula.php における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-5682	2012-12-20 18:33	2007-10-26	Show	GitHub Exploit DB Packet Storm

229538	7.5	危険	phpbasic	-	phpBasic の Music モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2007-5678	2012-12-20 18:33	2007-10-24	Show	GitHub Exploit DB Packet Storm

229539	7.5	危険	reloadcms	-	ReloadCMS の system.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5650	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

229540	4.3	警告	rnote	-	rNote の rnote.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5648	2012-12-20 18:33	2007-10-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2581	9.8	CRITICAL Network	-	-	NPM package next-npm-version1.0.1 is vulnerable to Command injection.	CWE-94 Code Injection	CVE-2025-63706	2026-05-9 08:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

2582	9.8	CRITICAL Network	-	-	npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2025-63703	2026-05-9 08:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

2583	9.1	CRITICAL Network	-	-	FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, the /user-setup/{hash} endpoint accepts a 60-character random invite_hash to set a new use…	CWE-613 Insufficient Session Expiration	CVE-2026-41902	2026-05-9 07:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

2584	9.8	CRITICAL Network	-	-	NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2025-63704	2026-05-9 07:16	2026-05-8	Show	GitHub Exploit DB Packet Storm

2585	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211_inform_bss_frame() may return NULL on failure. In that case, the all…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43225	2026-05-9 06:22	2026-05-6	Show	GitHub Exploit DB Packet Storm

2586	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: hfs: Replace BUG_ON with error handling for CNID count checks In a06ec283e125 next_id, folder_count, and file_count in the super …	CWE-617 Reachable Assertion	CVE-2026-43228	2026-05-9 06:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

2587	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_request_ex When pvr2_send_request_ex() submits a write URB successfully but fails to su…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43223	2026-05-9 06:14	2026-05-6	Show	GitHub Exploit DB Packet Storm

2588	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix sgtable leak on mapping failures In an unlikely case when io_populate_area_dma() fails, which could only happe…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43224	2026-05-9 06:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

2589	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running after probe The TMU device can be used as both a clocksource and a clocke…	NVD-CWE-noinfo	CVE-2026-43227	2026-05-9 06:11	2026-05-6	Show	GitHub Exploit DB Packet Storm

2590	5.5	MEDIUM Local	linux	linux_kernel	In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error path Fix a memory leak in usb_keene_probe(). The v4l2 control handler is initialized…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2026-43231	2026-05-9 06:09	2026-05-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed