Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231191 10 危険 realink - C-Arbre における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1721 2012-12-20 18:19 2007-03-27 Show GitHub Exploit DB Packet Storm
231192 7.5 危険 sb-websoft - PHP-Nuke 用の Addressbook モジュールにおけるディレクトリトラバーサルの脆弱性 - CVE-2007-1720 2012-12-20 18:19 2007-03-27 Show GitHub Exploit DB Packet Storm
231193 7.5 危険 ttcms - ttCMS の lib/db/ez_sql.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1708 2012-12-20 18:19 2007-03-26 Show GitHub Exploit DB Packet Storm
231194 7.8 危険 yet another telephony engine - Yate の SIP チャネルモジュールにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1693 2012-12-20 18:19 2007-05-17 Show GitHub Exploit DB Packet Storm
231195 6.8 警告 second sight software - Second Sight Software ActiveGS ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1691 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
231196 6.8 警告 second sight software - Second Sight Software ActiveGS ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1690 2012-12-20 18:19 2007-04-19 Show GitHub Exploit DB Packet Storm
231197 10 危険 シマンテック - Norton Personal Firewall および Internet Security 用の ISAlertDataCOM ActiveX コントロールにおけるバッファオーバーフローの脆弱性 - CVE-2007-1689 2012-12-20 18:19 2007-05-16 Show GitHub Exploit DB Packet Storm
231198 9.3 危険 solidworks - sldimdownload.dll の SolidWorks sldimdownload ActiveX コントロールにおける任意のコマンドを実行される脆弱性 - CVE-2007-1684 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
231199 9.3 危険 Yahoo! - Yahoo! Messenger の AudioConf ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1680 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
231200 7.5 危険 Python Software Foundation - Python の Modules/zlib におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1657 2012-12-20 18:19 2007-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1171 - - - An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds potentially resulting in loss of confidentiali… CWE-125
Out-of-bounds Read 		CVE-2024-21950 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1172 - - - Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a vict… CWE-284
Improper Access Control 		CVE-2024-36323 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1173 - - - Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with elevated privileges potentially leading to arb… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2024-36334 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1174 - - - A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an atta… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2025-52532 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1175 - - - Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu… CWE-1189
CVE-2025-54518 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1176 - - - Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in lo… CWE-1327
 Binding to an Unrestricted IP Address 		CVE-2026-0481 2026-05-15 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
1177 6.8 MEDIUM
Network 		pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … CWE-295
CWE-306
CWE-863
Improper Certificate Validation 
Missing Authentication for Critical Function
 Incorrect Authorization 		CVE-2026-42312 2026-05-15 23:09 2026-05-12 Show GitHub Exploit DB Packet Storm
1178 8.1 HIGH
Network 		- - The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function in all versions up… CWE-862
 Missing Authorization 		CVE-2026-4094 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1179 6.4 MEDIUM
Network 		- - The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and including, 14.3.2. This is due to insufficient input sanitiz… CWE-79
Cross-site Scripting 		CVE-2026-6646 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
1180 6.5 MEDIUM
Network 		- - The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endpoint in all versions up to, and … CWE-862
 Missing Authorization 		CVE-2026-4683 2026-05-15 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm