Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245171 4.6 警告 GNU Project - GNU ed における任意のファイルを上書きされる脆弱性 - CVE-2006-6939 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
245172 7.8 危険 EFS Software - Easy Chat Server における特定のファイルをダウンロードされる脆弱性 - CVE-2006-6933 2012-06-26 15:38 2007-01-16 Show GitHub Exploit DB Packet Storm
245173 7.5 危険 ga soft - Rapid Classified の viewad.asp における SQL インジェクションの脆弱性 - CVE-2006-6930 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245174 6.8 警告 ga soft - Rapid Classified におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6929 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245175 6.8 警告 grandora - Rialto におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6928 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245176 7.5 危険 grandora - Rialto における SQL インジェクションの脆弱性 - CVE-2006-6927 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245177 10 危険 extremail - eXtremail におけるバッファオーバーフローの脆弱性 - CVE-2006-6926 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245178 6.8 警告 Bitweaver - bitweaver におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-6925 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245179 5 警告 Bitweaver - bitweaver における重要な情報を取得される脆弱性 - CVE-2006-6924 2012-06-26 15:38 2007-01-12 Show GitHub Exploit DB Packet Storm
245180 10 危険 CA Technologies - CA BrightStor ARCserve Backup Server におけるバッファオーバーフローの脆弱性 - CVE-2006-6917 2012-06-26 15:38 2006-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
21 9.1 CRITICAL
Network 		- - auth provides authentication via oauth2, direct and email. From versions 1.18.0 to before 1.25.2 and 2.0.0 to before 2.1.2, the Patreon OAuth provider maps every authenticated Patreon account to the … New CWE-287
Improper Authentication 		CVE-2026-42560 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
22 - - - Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code e… New CWE-190
CWE-787
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-42311 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
23 - - - Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the… New CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-42310 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
24 - - - Pillow is a Python imaging library. From version 11.2.1 to before version 12.2.0, passing nested lists as coordinates to APIs that accept coordinates such as ImagePath.Path, ImageDraw.ImageDraw.polyg… New CWE-122
Heap-based Buffer Overflow 		CVE-2026-42309 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
25 - - - Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer… New CWE-190
 Integer Overflow or Wraparound 		CVE-2026-42308 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
26 - - - A missing authorization vulnerability in HCL BigFix WebUI allows an authenticated user without proper permissions to view sensitive environmental information via direct URL access to the unauthorized… New CWE-862
 Missing Authorization 		CVE-2025-15634 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
27 - - - An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versions, and configuration variables)… New CWE-863
 Incorrect Authorization 		CVE-2025-15633 2026-05-9 15:16 2026-05-9 Show GitHub Exploit DB Packet Storm
28 - - - Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of th… New CWE-23
 Relative Path Traversal 		CVE-2026-8209 2026-05-9 13:16 2026-05-9 Show GitHub Exploit DB Packet Storm
29 - - - Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PH… New CWE-98
 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') 		CVE-2026-8208 2026-05-9 13:16 2026-05-9 Show GitHub Exploit DB Packet Storm
30 7.5 HIGH
Local 		- - An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix Archive) parser could lead to a stack-to-heap overflow when the parser is run on a coroutine st… Update CWE-674
 Uncontrolled Recursion 		CVE-2026-44028 2026-05-9 13:16 2026-05-5 Show GitHub Exploit DB Packet Storm