Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
191771 6.1 警告
Network
Tiki Software Community Association - Tiki Wiki CMS Groupware の lib/core/TikiFilter/PreventXss.php における XSS フィルタを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-9305 2017-06-27 15:12 2017-04-5 Show GitHub Exploit DB Packet Storm
191772 8.2 重要
Local
Todd C. Miller - Todd Miller の Sudo の get_process_ttyname() 関数における情報を公開される脆弱性 CWE-20
不適切な入力確認
CVE-2017-1000368 2017-06-27 15:12 2017-05-30 Show GitHub Exploit DB Packet Storm
191773 7.8 重要
Local
Palo Alto Networks - Palo Alto Networks Panorama VM アプライアンスの PAN-OS における任意の Python コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-6531 2017-06-27 15:12 2015-09-15 Show GitHub Exploit DB Packet Storm
191774 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Uniscribe におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8534 2017-06-27 15:10 2017-06-13 Show GitHub Exploit DB Packet Storm
191775 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8533 2017-06-27 15:10 2017-06-13 Show GitHub Exploit DB Packet Storm
191776 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8532 2017-06-27 15:09 2017-06-13 Show GitHub Exploit DB Packet Storm
191777 6.5 警告
Network
マイクロソフト - 複数の Microsoft Windows および Office 製品の Graphics におけるメモリコンテンツを不適切に公開される脆弱性 CWE-200
情報漏えい
CVE-2017-8531 2017-06-27 15:09 2017-06-13 Show GitHub Exploit DB Packet Storm
191778 7.5 重要
Network
マイクロソフト - 複数の Microsoft Windows 製品のブラウザにおける現在のユーザのコンテキストで任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2017-8517 2017-06-27 14:47 2017-06-13 Show GitHub Exploit DB Packet Storm
191779 7.8 重要
Local
マイクロソフト - 複数の Microsoft 製品におけるリモートでコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-0260 2017-06-27 14:47 2017-06-13 Show GitHub Exploit DB Packet Storm
191780 5.5 警告
Local
マイクロソフト - 複数の Microsoft Windows 製品における読み取り専用または認証を要求する変数を設定される脆弱性 CWE-254
セキュリティ機能
CVE-2017-8493 2017-06-27 14:33 2017-06-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
741 7.3 HIGH
Network
- - A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sq… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8098 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
742 6.3 MEDIUM
Network
- - A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injec… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-8097 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
743 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-34429. Reason: This candidate is a duplicate of CVE-2026-34429. Notes: All CVE users should reference CVE-2026-344… New - CVE-2026-44365 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
744 7.8 HIGH
Local
- - GitPython is a python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.set_value() passes values to Python's configparser without validating for newlines. GitP… New CWE-94
Code Injection
CVE-2026-44244 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
745 7.7 HIGH
Network
- - FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastR… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41905 2026-05-8 06:16 2026-05-8 Show GitHub Exploit DB Packet Storm
746 7.1 HIGH
Local
gitpython_project gitpython GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application … New CWE-22
Path Traversal
CVE-2026-44243 2026-05-8 06:12 2026-05-8 Show GitHub Exploit DB Packet Storm
747 5.3 MEDIUM
Network
- - ParquetSharp is a .NET library for reading and writing Apache Parquet files. From version 18.1.0 to before version 23.0.0.1, DecimalConverter.ReadDecimal makes a stackalloc using what might be an att… New CWE-789
 Memory Allocation with Excessive Size Value
CVE-2026-42241 2026-05-8 05:37 2026-05-8 Show GitHub Exploit DB Packet Storm
748 - - - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport (sip_transport_tls) can accept connections with invalid o… New CWE-295
Improper Certificate Validation 
CVE-2026-42225 2026-05-8 05:36 2026-05-8 Show GitHub Exploit DB Packet Storm
749 8.1 HIGH
Network
- - Budibase is an open-source low-code platform. Prior to version 3.35.10, the budibase:auth cookie containing the JWT session token is set with httpOnly: false at packages/backend-core/src/utils/utils.… New CWE-1004
 Sensitive Cookie Without 'HttpOnly' Flag
CVE-2026-42239 2026-05-8 05:35 2026-05-8 Show GitHub Exploit DB Packet Storm
750 7.6 HIGH
Network
- - manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. F… New CWE-266
 Incorrect Privilege Assignment
CVE-2026-43510 2026-05-8 05:32 2026-05-8 Show GitHub Exploit DB Packet Storm