Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230241 10 危険 prosysinfo - TFTPdWin におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2639 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230242 10 危険 positive software - H-Sphere SiteStudio におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2633 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230243 7.5 危険 SquirrelMail Project - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-2631 2012-12-20 18:19 2007-05-13 Show GitHub Exploit DB Packet Storm
230244 6.8 警告 WordPress.org - WordPress の sidebar.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2627 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230245 7.5 危険 taskdriver - TaskDriver における SQL インジェクションの脆弱性 - CVE-2007-2622 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230246 4.6 警告 シマンテック - Symantec pcAnywhere における資格情報を取得される脆弱性 - CVE-2007-2619 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230247 2.1 注意 サン・マイクロシステムズ - Sun Solaris の SRS Net Connect Software Proxy Core パッケージにおける任意のファイルの最初の行を読まれる脆弱性 - CVE-2007-2617 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230248 7.5 危険 phphtmllib - phpHtmlLib の examples/widget8.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2614 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230249 8.3 危険 Wikka Development Team - WikkaWiki における任意の設定ファイルをアップロードされる脆弱性 - CVE-2007-2613 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
230250 7.5 危険 Wikka Development Team - WikkaWiki の libs/Wakka.class.php における SQL インジェクションの脆弱性 - CVE-2007-2612 2012-12-20 18:19 2007-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 6.1 MEDIUM
Network 		- - Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function CWE-79
Cross-site Scripting 		CVE-2026-36906 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1992 - - - SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution… - CVE-2026-36962 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1993 8.1 HIGH
Network 		- - HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/<id> and /interview/<id> endpoints. The route handlers retrieve … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-38568 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1994 5.4 MEDIUM
Network 		- - HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add. CWE-79
Cross-site Scripting 		CVE-2026-38569 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1995 5.3 MEDIUM
Network 		uriparser_project uriparser In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2026-44928 2026-05-13 00:00 2026-05-8 Show GitHub Exploit DB Packet Storm
1996 5.3 MEDIUM
Network 		sync-in sync-in_server Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthen… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-41161 2026-05-13 00:00 2026-05-8 Show GitHub Exploit DB Packet Storm
1997 5.3 MEDIUM
Network 		angular angular Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Se… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41423 2026-05-12 23:58 2026-05-8 Show GitHub Exploit DB Packet Storm
1998 7.5 HIGH
Network 		- - An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan o… CWE-121
Stack-based Buffer Overflow 		CVE-2026-29974 2026-05-12 23:51 2026-05-9 Show GitHub Exploit DB Packet Storm
1999 7.5 HIGH
Network 		- - lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detection logic incorrectly identifies escaped quote characters by o… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-29975 2026-05-12 23:51 2026-05-9 Show GitHub Exploit DB Packet Storm
2000 9.1 CRITICAL
Network 		- - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achieve Remote Code Execution (RCE) by uploading a specially crafted ZIP file throug… CWE-94
Code Injection 		CVE-2026-42607 2026-05-12 23:51 2026-05-12 Show GitHub Exploit DB Packet Storm