Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232351 6.8 警告 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0604 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232352 6.9 警告 トレンドマイクロ - Linux 用の Trend Micro VirusWall におけるバッファオーバーフローの脆弱性 - CVE-2007-0602 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232353 5 警告 siteman - Siteman におけるパスワードハッシュを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0594 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232354 5 警告 siteman - Siteman におけるパスワードハッシュを含むデータベースをダウンロードされる脆弱性 - CVE-2007-0593 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232355 7.5 危険 vu le an - VirtualPath の configure.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0591 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232356 9.3 危険 webfwlog - Webfwlog の include/debug.php におけるファイルのソースコードを取得される脆弱性 - CVE-2007-0585 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232357 7.5 危険 xt-stats - Xt-Stats の xt_counter.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0576 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232358 7.5 危険 stefan holmberg - ASPCode.net AdMentor の administrative login page における SQL インジェクションの脆弱性 - CVE-2007-0575 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232359 7.5 危険 spoonlabs - SpoonLabs Vivvo Article Management CMS の rss/show_webfeed.php における SQL インジェクションの脆弱性 - CVE-2007-0574 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
232360 7.5 危険 phpmyreports - phpMyReports の include/lib/lib_head.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0571 2012-12-20 18:19 2007-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 8.6 HIGH
Local 		- - Zed is a code editor. Prior to 0.227.1, Zed builds SSH/WSL remote commands as a shell command string that starts with exec env ..., but environment variable keys are inserted without shell quoting or… New CWE-78
OS Command  		CVE-2026-44461 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
582 6.4 MEDIUM
Network 		- - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed via bash variable expansion chaining (${var@P}), allowing arbitrary command execution under an allowliste… New CWE-184
 Incomplete Blacklist 		CVE-2026-44462 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
583 8.6 HIGH
Local 		- - Zed is a code editor. Prior to 0.229.0, Zed's terminal tool permission system can be bypassed by prepending environment variable assignments to allowlisted commands, hijacking program behavior (e.g.,… New CWE-78
CWE-184
OS Command 
 Incomplete Blacklist 		CVE-2026-44463 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
584 8.6 HIGH
Local 		- - Zed is a code editor. Prior to 0.227.1, Zed IDE executes arbitrary commands when opening a folder with a malicious .git/config file that abuses the core.fsmonitor Git configuration option. This allow… New CWE-78
OS Command  		CVE-2026-44465 2026-05-29 03:55 2026-05-29 Show GitHub Exploit DB Packet Storm
585 8.2 HIGH
Network 		free5gc free5gc free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, PCF Npcf_SMPolicyControl missing authentication middleware allows unauthenticated access to SM policy handlers and dis… New CWE-862
 Missing Authorization 		CVE-2026-42083 2026-05-29 03:40 2026-05-28 Show GitHub Exploit DB Packet Storm
586 7.7 HIGH
Network 		- - OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, OpenReplay's Python API exposes several app_apikey routes that trust a caller-provided projectKey after validating only that the API… New CWE-284
Improper Access Control 		CVE-2026-45296 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
587 - - - OpenReplay is a self-hosted session replay suite. Prior to 1.26.0, there is a cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatch. ProjectAuthorizer.__call__ (OSS… New CWE-285
CWE-639
CWE-863
Improper Authorization
 Authorization Bypass Through User-Controlled Key
 Incorrect Authorization 		CVE-2026-45297 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
588 7.4 HIGH
Network 		- - CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.22, the fetch_url tool validates the initial URL's resolved IP address against a restricted-IP blocklist (is_restricted_ip()) to … New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45310 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
589 7.4 HIGH
Network 		- - CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in‌‌ URL‌ as htt… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-45373 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm
590 9.6 CRITICAL
Network 		- - CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user… New CWE-94
Code Injection 		CVE-2026-45311 2026-05-29 03:40 2026-05-29 Show GitHub Exploit DB Packet Storm