Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246131 7.2 危険 Comodo - Comodo Firewall Pro における Microsoft Windows API 機能が呼び出される脆弱性 - CVE-2007-2729 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246132 7.8 危険 bitscast - BitsCast におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-2726 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246133 7.5 危険 db soft lab - DEWizardAX.ocx における任意のファイルを上書きされる脆弱性 - CVE-2007-2725 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246134 4.3 警告 fotolog - fotolog の all_photos.html におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2724 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246135 4.3 警告 Intermesh - Group-Office における重要な情報を取得される脆弱性 - CVE-2007-2720 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246136 6.8 警告 eqdkp - EQdkp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2716 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246137 7.5 危険 feindt computerservice - News-Script の newsadmin.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2708 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246138 7.5 危険 Geeklog - Media Gallery の maint/ftpmedia.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2706 2012-06-26 15:46 2007-05-16 Show GitHub Exploit DB Packet Storm
246139 7.8 危険 BEAシステムズ - BEA WebLogic Integration の Test View Console におけるディレクトリトラバーサルの脆弱性 - CVE-2007-2705 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
246140 3.6 注意 BEAシステムズ - BEA WebLogic Portal GA における特権を有するリソースへアクセスされる脆弱性 - CVE-2007-2703 2012-06-26 15:46 2007-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 - - - Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, a vulnerability in the discourse-subscriptions plugin allows users to gain a… New CWE-862
 Missing Authorization 		CVE-2026-34154 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
262 5.9 MEDIUM
Network 		- - LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attack… New CWE-863
 Incorrect Authorization 		CVE-2026-41470 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
263 0.0 NONE
Network 		- - Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters. Versions 2.0.0 through 2.14.1 still allow protocol-relative host override when the request tar… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-33637 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
264 9.9 CRITICAL
Network 		- - Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validation on composition offsets using unsigned … New CWE-125
CWE-190
CWE-787
Out-of-bounds Read
 Integer Overflow or Wraparound
 Out-of-bounds Write 		CVE-2026-33642 2026-05-20 06:08 2026-05-20 Show GitHub Exploit DB Packet Storm
265 - - - Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX, Solaris x64, Solaris Sparc 64 … New CWE-250
 Execution with Unnecessary Privileges 		CVE-2026-8370 2026-05-20 06:01 2026-05-20 Show GitHub Exploit DB Packet Storm
266 8.8 HIGH
Network 		getgrav grav Grav is a file-based Web platform. In Grav 2.0.0-beta.2, a low-privileged authenticated API user with api.media.write can abuse /api/v1/blueprint-upload to write an arbitrary YAML file into user/acco… Update CWE-269
CWE-434
 Improper Privilege Management
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-42844 2026-05-20 06:00 2026-05-13 Show GitHub Exploit DB Packet Storm
267 7.5 HIGH
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation and missing capability check in … New CWE-23
 Relative Path Traversal 		CVE-2026-8073 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
268 6.5 MEDIUM
Network 		- - The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6. This is due to the plugin not p… New CWE-862
 Missing Authorization 		CVE-2026-8096 2026-05-20 06:00 2026-05-20 Show GitHub Exploit DB Packet Storm
269 7.8 HIGH
Local 		protobufjs_project protobufjs-cli protobufjs-cli is the command line add-on for protobuf.js. Prior to 1.2.1 and 2.0.2, pbts invoked JSDoc by building a shell command string from input file paths and executing it through child_process… Update CWE-78
OS Command  		CVE-2026-42290 2026-05-20 05:56 2026-05-14 Show GitHub Exploit DB Packet Storm
270 5.3 MEDIUM
Network 		protobufjs_project protobufjs protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder that accepted overlong UTF-8 byte sequences and decoded … Update CWE-176
 Improper Handling of Unicode Encoding 		CVE-2026-44288 2026-05-20 05:46 2026-05-14 Show GitHub Exploit DB Packet Storm