Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230751 7.5 危険 phpbb2-modificat - phpBB2-MODificat の includes/functions.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0656 2012-12-20 18:19 2007-02-1 Show GitHub Exploit DB Packet Storm
230752 9.3 危険 x multimedia system - xmms における整数アンダーフローの脆弱性 - CVE-2007-0654 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
230753 9.3 危険 x multimedia system - xmms における整数オーバーフローの脆弱性 - CVE-2007-0653 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
230754 7.5 危険 rbl - Raymond BERTHOU script collection の tForum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-0642 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230755 7.5 危険 shaffer solutions corp - SSC DiskAccess NFS Client の EnumPrintersA 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-0641 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230756 10 危険 Zabbix - ZABBIX におけるバッファオーバーフローの脆弱性 - CVE-2007-0640 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230757 5 警告 vlad alexa mancini - Vlad Alexa Mancini PHPFootball の show.php における重要な情報を取得される脆弱性 - CVE-2007-0638 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230758 7.5 危険 t-systems solutions for research gmbh - MyNews の include/themes/themefunc.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0633 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230759 7.5 危険 x-dev - X-dev xNews の classes/class.news.php における SQL インジェクションの脆弱性 - CVE-2007-0630 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
230760 6.4 警告 plain black - Plain Black WebGUI の www_purgeList メソッドにおける許可されていないアセットを削除される脆弱性 - CVE-2007-0629 2012-12-20 18:19 2007-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1501 8.4 HIGH
Network 		- - A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher throu… CWE-35
 Path Traversal: '.../...//' 		CVE-2026-25705 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1502 9.9 CRITICAL
Network 		- - Fleet's Helm deployer did not fully apply ServiceAccount impersonation in two code paths, allowing a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on … CWE-863
 Incorrect Authorization 		CVE-2026-41050 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1503 - - - The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown() arbitrary files in the sy… CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-25710 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1504 - - - The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-44931 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1505 8.8 HIGH
Adjacent 		- - A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim… CWE-79
Cross-site Scripting 		CVE-2026-23819 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1506 7.2 HIGH
Network 		- - A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environme… CWE-78
OS Command  		CVE-2026-23820 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1507 7.2 HIGH
Network 		- - A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Su… CWE-78
OS Command  		CVE-2026-23821 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1508 5.3 MEDIUM
Network 		- - A vulnerability in the XML handling component of AOS-8 DHCP services could allow an unauthenticated remote attacker to trigger a denial-of-service condition. Successful exploitation could allow an at… CWE-776
XML Entity Expansion 		CVE-2026-23822 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1509 7.2 HIGH
Network 		- - A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacke… CWE-77
Command Injection 		CVE-2026-23823 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1510 9.1 CRITICAL
Network 		- - Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new connection is created by a data… - CVE-2025-11159 2026-05-14 00:35 2026-05-13 Show GitHub Exploit DB Packet Storm