Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198121 5.3 警告
Network
The phpMyAdmin Project - phpMyAdmin の url.php ファイルにおけるホストの位置を特定される脆弱性 CWE-200
情報漏えい
CVE-2016-6627 2016-12-15 14:56 2016-07-24 Show GitHub Exploit DB Packet Storm
198122 4.3 警告
Network
The phpMyAdmin Project - phpMyAdmin におけるログインユーザを特定される脆弱性 CWE-200
情報漏えい
CVE-2016-6625 2016-12-15 14:56 2016-07-24 Show GitHub Exploit DB Packet Storm
198123 8.1 重要
Network
The phpMyAdmin Project - phpMyAdmin のエクスポート機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-6617 2016-12-15 14:56 2016-07-14 Show GitHub Exploit DB Packet Storm
198124 6.5 警告
Network
The phpMyAdmin Project - phpMyAdmin の LOAD LOCAL INFILE 機能におけるサーバ上のファイルをデータベースシステムに公開される脆弱性 CWE-200
情報漏えい
CVE-2016-6612 2016-12-15 14:56 2016-07-12 Show GitHub Exploit DB Packet Storm
198125 8.1 重要
Network
The phpMyAdmin Project - phpMyAdmin の Cookie の暗号化におけるユーザ名およびパスワードを解読される脆弱性 CWE-200
CWE-310
CVE-2016-6606 2016-12-15 14:56 2016-07-7 Show GitHub Exploit DB Packet Storm
198126 4.4 警告
Network
The phpMyAdmin Project - phpMyAdmin における悪意のあるサイトにリダイレクトされる脆弱性 CWE-254
セキュリティ機能
CVE-2016-4412 2016-12-15 14:56 2016-11-25 Show GitHub Exploit DB Packet Storm
198127 9.8 緊急
Network
JFrog Ltd. - JFrog Artifactory における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6501 2016-12-15 13:45 2016-07-31 Show GitHub Exploit DB Packet Storm
198128 9.8 緊急
Network
BDWGC project - bdwgc のクライアントにおける整数オーバーフローの脆弱性 CWE-119
CWE-190
CVE-2016-9427 2016-12-14 17:54 2016-09-27 Show GitHub Exploit DB Packet Storm
198129 6.5 警告
Network
w3m project - Tatsuya Kinoshita w3m フォークにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-9633 2016-12-14 16:27 2016-11-7 Show GitHub Exploit DB Packet Storm
198130 6.5 警告
Network
w3m project - Tatsuya Kinoshita w3m フォークにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-9632 2016-12-14 16:27 2016-11-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
931 4.2 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, when a user changes their password, browser sessions are correctly invalidated via "cycle_session_keys()", but DRF API tokens ("wlu_… New CWE-613
 Insufficient Session Expiration
CVE-2026-41519 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
932 - - - Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial p… New CWE-20
CWE-918
 Improper Input Validation 
Server-Side Request Forgery (SSRF) 
CVE-2026-41654 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
933 4.3 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. Th… New CWE-203
 Information Exposure Through Discrepancy
CVE-2026-44263 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
934 4.3 MEDIUM
Network
- - Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has… New CWE-80
Basic XSS
CVE-2026-44264 2026-05-8 00:46 2026-05-8 Show GitHub Exploit DB Packet Storm
935 7.7 HIGH
Network
- - Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname() but passes the origina… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-41688 2026-05-8 00:45 2026-05-8 Show GitHub Exploit DB Packet Storm
936 9.6 CRITICAL
Network
- - Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in th… Update CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-42090 2026-05-8 00:44 2026-05-5 Show GitHub Exploit DB Packet Storm
937 8.1 HIGH
Network
- - Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary… Update CWE-22
Path Traversal
CVE-2026-42075 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
938 5.3 MEDIUM
Network
- - Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /api/notes/{id}, /api/… Update CWE-285
Improper Authorization
CVE-2026-41572 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
939 6.5 MEDIUM
Network
- - titra is an open source time tracking project. In version 0.99.52, the globalsettings Meteor publication returns all global settings without any admin or role check. Any authenticated user can subscr… Update CWE-200
Information Exposure
CVE-2026-42092 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm
940 4.4 MEDIUM
Network
- - PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows user… Update CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42140 2026-05-8 00:43 2026-05-5 Show GitHub Exploit DB Packet Storm