Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232451 7.5 危険 uniforum - uniForum の wbsearch.aspx における SQL インジェクションの脆弱性 - CVE-2007-0226 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
232452 6.8 警告 virtual programming - VP-ASP Shopping Cart の shopcustadmin.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0225 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
232453 7.5 危険 virtual programming - VP-ASP Shopping Cart の shopgiftregsearch.asp における SQL インジェクションの脆弱性 - CVE-2007-0224 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
232454 6.8 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0204 2012-12-20 18:19 2007-01-11 Show GitHub Exploit DB Packet Storm
232455 10 危険 The phpMyAdmin Project - phpMyAdmin における脆弱性 - CVE-2007-0203 2012-12-20 18:19 2007-01-11 Show GitHub Exploit DB Packet Storm
232456 10 危険 tis - TIS Internet FWTK の ftp-gw におけるバッファオーバーフローの脆弱性 - CVE-2007-0201 2012-12-20 18:19 2007-01-11 Show GitHub Exploit DB Packet Storm
232457 6.8 警告 サン・マイクロシステムズ - iPlanet Web Server の /search におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0183 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
232458 7.5 危険 scriptaty - magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0182 2012-12-20 18:19 2007-01-12 Show GitHub Exploit DB Packet Storm
232459 7.5 危険 scriptaty - magic photo storage の Web サイトにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0181 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
232460 7.5 危険 PHPKIT - PHPKIT の comment.php における SQL インジェクションの脆弱性 - CVE-2007-0179 2012-12-20 18:19 2007-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
581 8.8 HIGH
Network 		- - @pensar/apex <= 0.0.58 is vulnerable to OS command injection via the smart_enumerate tool. The createSmartEnumerateTool() function in src/core/agent/tools.ts constructs a shell command by concatenati… Update CWE-78
OS Command  		CVE-2026-36044 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
582 7.3 HIGH
Network 		- - An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin v1.1.6 allows attackers to execute arbitrary code via uploading a crafted image file. New CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-30761 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
583 7.3 HIGH
Network 		- - An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data in the web app via a crafted XAJAX call. New CWE-20
 Improper Input Validation  		CVE-2026-30760 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
584 4.0 MEDIUM
Local 		- - XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupted application data by sending u… New CWE-1286
 Improper Validation of Syntactic Correctness of Input 		CVE-2026-10099 2026-05-30 01:16 2026-05-30 Show GitHub Exploit DB Packet Storm
585 6.3 MEDIUM
Network 		- - A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to comma… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-10060 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
586 8.3 HIGH
Network 		- - Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sand… New CWE-20
 Improper Input Validation  		CVE-2026-10020 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
587 8.3 HIGH
Network 		- - Out of bounds read in Headless in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML p… New CWE-125
Out-of-bounds Read 		CVE-2026-10017 2026-05-30 01:16 2026-05-29 Show GitHub Exploit DB Packet Storm
588 5.3 MEDIUM
Network 		- - Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass. Update CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2025-67903 2026-05-30 01:16 2026-05-28 Show GitHub Exploit DB Packet Storm
589 5.5 MEDIUM
Local 		- - IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. _dosToUnixTime() decodes the local-file-header last-modification da… Update CWE-248
 Uncaught Exception 		CVE-2025-15649 2026-05-30 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
590 7.5 HIGH
Network 		- - Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attac… New CWE-256
Plaintext Storage of a Password  		CVE-2018-25396 2026-05-30 01:16 2026-05-30 Show GitHub Exploit DB Packet Storm