Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 2:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245071 5 警告 Digium - Asterisk Open Source の SIP チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-0095 2012-06-26 15:54 2008-01-2 Show GitHub Exploit DB Packet Storm
245072 4.3 警告 eticket - eTicket の newticket.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0093 2012-06-26 15:54 2008-01-7 Show GitHub Exploit DB Packet Storm
245073 6.4 警告 agency4net - AGENCY4NET WebFTP の download2.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2008-0091 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
245074 6.8 警告 アルバネットワークス株式会社 - Aruba Mobility Controller の LDAP 認証機能におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2008-0150 2012-06-26 15:54 2007-12-22 Show GitHub Exploit DB Packet Storm
245075 10 危険 Extended Module Player Project - XMP の dtt_load 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-6732 2012-06-26 15:54 2009-09-13 Show GitHub Exploit DB Packet Storm
245076 10 危険 Extended Module Player Project - XMP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2007-6731 2012-06-26 15:54 2009-09-13 Show GitHub Exploit DB Packet Storm
245077 4.3 警告 アップル
anonymityanywhere
マイクロソフト
- Windows および Mac OS X 上で稼働する TorK における設定を変更される脆弱性 CWE-16
環境設定
CVE-2007-6723 2012-06-26 15:54 2009-03-31 Show GitHub Exploit DB Packet Storm
245078 10 危険 Bouncy Castle - Crypto Provider Package で使用される The Legion of the Bouncy Castle Java Cryptography API における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2007-6721 2012-06-26 15:54 2009-03-29 Show GitHub Exploit DB Packet Storm
245079 5 警告 マイクロソフト
DivX
- DivX Player の npUpload.dll の ActiveX コントロールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0090 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
245080 7.5 危険 clip-share - ClipShare の uprofile.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0089 2012-06-26 15:54 2008-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
821 4.7 MEDIUM
Network
lfprojects mcp_registry The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub OIDC flow is bound only to a global audienc… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-44428 2026-05-16 02:23 2026-05-15 Show GitHub Exploit DB Packet Storm
822 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, an authenticated Remote Code Execution (RCE) vulnerability in the OPNsense core allows a user with user-management privileg… CWE-78
OS Command 
CVE-2026-44194 2026-05-16 02:19 2026-05-14 Show GitHub Exploit DB Packet Storm
823 6.5 MEDIUM
Network
shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44423 2026-05-16 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
824 7.5 HIGH
Network
zitadel zitadel ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro… CWE-90
LDAP Injection
CVE-2026-44671 2026-05-16 02:15 2026-05-15 Show GitHub Exploit DB Packet Storm
825 6.5 MEDIUM
Network
frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… CWE-862
 Missing Authorization
CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
826 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… CWE-88
Argument Injection
CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm
827 4.3 MEDIUM
Network
- - Insufficient policy enforcement in IFrame Sandbox in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… CWE-693
 Protection Mechanism Failure
CVE-2026-8563 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm
828 6.5 MEDIUM
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.7, a logic flaw in the OPNsense lockout_handler allows an unauthenticated attacker to continuously reset the authentication fa… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2026-44195 2026-05-16 01:06 2026-05-14 Show GitHub Exploit DB Packet Storm
829 9.8 CRITICAL
Network
apache tomcat Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 10.0.0… CWE-20
 Improper Input Validation 
CVE-2026-41293 2026-05-16 00:57 2026-05-13 Show GitHub Exploit DB Packet Storm
830 9.8 CRITICAL
Network
apache tomcat DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, fr… CWE-592
 DEPRECATED: Authentication Bypass Issues
CVE-2026-43512 2026-05-16 00:54 2026-05-13 Show GitHub Exploit DB Packet Storm