Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255901	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0739	2010-05-26 16:32	2010-04-16	Show	GitHub Exploit DB Packet Storm

255902	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1279	2010-05-26 16:32	2010-04-30	Show	GitHub Exploit DB Packet Storm

255903	9.3	危険	レッドハット freedesktop.org サイバートラスト株式会社 Glyph & Cog, LLC	-	Xpdf および Poppler の ObjectStream::ObjectStream 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3608	2010-05-26 16:31	2009-10-15	Show	GitHub Exploit DB Packet Storm

255904	6.8	警告	サイバートラスト株式会社レッドハット CUPS	-	CUPS の pdftops フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0791	2010-05-26 16:30	2009-06-3	Show	GitHub Exploit DB Packet Storm

255905	6.8	警告	レッドハット Glyph & Cog, LLC サイバートラスト株式会社 CUPS	-	Xpdf および CUPS におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0195	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

255906	4.3	警告	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 MMR デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1183	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

255907	7.5	危険	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 MMR デコーダにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1182	2010-05-26 16:30	2009-04-16	Show	GitHub Exploit DB Packet Storm

255908	5	警告	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1181	2010-05-26 16:29	2009-04-16	Show	GitHub Exploit DB Packet Storm

255909	6.8	警告	Glyph & Cog, LLC freedesktop.org 日本電気サイバートラスト株式会社 CUPS レッドハット	-	JBIG2 デコーダにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-1180	2010-05-26 16:29	2009-04-16	Show	GitHub Exploit DB Packet Storm

255910	6.8	警告	Glyph & Cog, LLC freedesktop.org 日本電気アップルサイバートラスト株式会社 CUPS レッドハット	-	JBIG2 デコーダにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1179	2010-05-26 16:29	2009-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
581	6.5	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories. Attackers can submit tr… Update	CWE-73 External Control of File Name or Path	CVE-2026-45008	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

582	4.3	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoints by only checking login statu… Update	CWE-863 Incorrect Authorization	CVE-2026-45009	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

583	9.1	CRITICAL Network	-	-	phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id parameters without session bind… Update	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2026-45010	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

584	7.5	HIGH Network	-	-	phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting malicious OAuth token claims. Attac… Update	CWE-89 SQL Injection	CVE-2026-46359	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

585	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations, allowing attackers to bypass san… Update	CWE-79 Cross-site Scripting	CVE-2026-46360	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

586	6.9	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filter, disabling autoescape protect… Update	CWE-79 Cross-site Scripting	CVE-2026-46361	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

587	6.5	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after sending a forbidden response. Att… Update	CWE-863 Incorrect Authorization	CVE-2026-46362	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

588	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles. The vulnerability allows authent… Update	CWE-79 Cross-site Scripting	CVE-2026-46363	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

589	9.8	CRITICAL Network	-	-	phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent h… Update	CWE-89 SQL Injection	CVE-2026-46364	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

590	5.4	MEDIUM Network	-	-	phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags. Any logged-in user, incl… Update	CWE-862 Missing Authorization	CVE-2026-46365	2026-05-19 02:25	2026-05-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed