Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232071 5.8 警告 tyger - TygerBT におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1291 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
232072 7.5 危険 tyger - TygerBT の ViewReport.php における SQL インジェクションの脆弱性 - CVE-2007-1290 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
232073 6.4 警告 tyger - TygerBT の ViewBugs.php における SQL インジェクションの脆弱性 - CVE-2007-1289 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
232074 10 危険 webmobo - Webmobo WB News における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1288 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
232075 7.5 危険 WordPress.org - WordPress における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1277 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
232076 6.6 警告 VMware - VMware ESX Server におけるバッファオーバーフローの脆弱性 - CVE-2007-1271 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
232077 5 警告 VMware - VMware ESX Server におけるメモリ二重解放の脆弱性 CWE-189
数値処理の問題 		CVE-2007-1270 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
232078 5 警告 Sylpheed - Sylpheed における検出されずにメッセージ内容を偽造される脆弱性 - CVE-2007-1267 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
232079 7.5 危険 webmod - WebMod の server.cpp におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1260 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
232080 7.5 危険 web-app.org - WebAPP における脆弱性 CWE-noinfo
情報不足 		CVE-2007-1259 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
811 3.5 LOW
Network 		- - action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. New CWE-601
Open Redirect 		CVE-2026-48832 2026-05-27 05:19 2026-05-25 Show GitHub Exploit DB Packet Storm
812 - - - Easyelife App lock (aka Fingerprint,Applock or locker.app.safe.applocker) 1.9.2 for Android allows a local attacker with physical access to bypass the PIN lock. The lock is implemented as an overlay … New - CVE-2025-68710 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
813 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Tiktok Feed: from n/a through 1.0.24. New CWE-862
 Missing Authorization 		CVE-2026-24520 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
814 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking M… New CWE-862
 Missing Authorization 		CVE-2026-25426 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
815 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9. New CWE-862
 Missing Authorization 		CVE-2026-25444 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
816 6.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5. New CWE-862
 Missing Authorization 		CVE-2026-27331 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
817 7.3 HIGH
Network 		- - A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the a… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9574 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
818 7.3 HIGH
Network 		- - A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulat… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9575 2026-05-27 05:19 2026-05-27 Show GitHub Exploit DB Packet Storm
819 9.8 CRITICAL
Network 		litespeedtech litespeed_cpanel_plugin
litespeed_whm_plugin 		LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsona… Update CWE-266
 Incorrect Privilege Assignment 		CVE-2026-48172 2026-05-27 05:19 2026-05-21 Show GitHub Exploit DB Packet Storm
820 7.5 HIGH
Network 		- - D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the table_name parameter in POST req… New CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2018-25358 2026-05-27 05:16 2026-05-24 Show GitHub Exploit DB Packet Storm