Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
198951 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアの /setup URI におけるページのアクセス制限を回避される脆弱性 CWE-264
CWE-Other
CVE-2016-6536 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
198952 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアにおける root アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-6535 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
198953 5.9 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Micro Edition Suite のクライアントにおける暗号保護メカニズムを破られる脆弱性 CWE-Other
その他
CVE-2016-0923 2016-09-26 11:47 2016-09-15 Show GitHub Exploit DB Packet Storm
198954 7.5 重要
Local
ABB - ABB DataManagerPro における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-4526 2016-09-26 11:43 2016-08-18 Show GitHub Exploit DB Packet Storm
198955 5.3 警告
Network
トレイン・ジャパン株式会社 - Trane Tracer SC の Web サーバにおける重要な設定ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-0870 2016-09-26 11:32 2016-09-15 Show GitHub Exploit DB Packet Storm
198956 9.8 緊急
Network
ICU project - International Components for Unicode の common/locid.cpp の Locale クラスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7415 2016-09-26 09:39 2016-09-13 Show GitHub Exploit DB Packet Storm
198957 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_rar.c の copy_from_lzss_window 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8934 2016-09-23 16:33 2015-06-20 Show GitHub Exploit DB Packet Storm
198958 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_tar.c の archive_read_format_tar_skip 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-8933 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
198959 5.5 警告
Local
SUSE
libarchive
Debian
Canonical
- libarchive の archive_read_support_filter_compress.c の compress_bidder_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8932 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
198960 7.8 重要
Local
SUSE
libarchive
Debian
Canonical
- libarchive の archive_read_support_format_mtree.c の get_time_t_max および get_time_t_min 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-8931 2016-09-23 16:33 2015-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
261 4.3 MEDIUM
Network
- - A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be p… New CWE-352
CWE-862
 Origin Validation Error
 Missing Authorization
CVE-2026-7108 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
262 3.5 LOW
Network
- - A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cro… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7110 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
263 6.3 MEDIUM
Network
- - A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID causes sql injection… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7114 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
264 6.3 MEDIUM
Network
- - A vulnerability was identified in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file 370project/delete.php. Such manipulation of the argument ID leads t… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7115 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
265 5.6 MEDIUM
Network
- - A vulnerability has been found in NousResearch hermes-agent 0.8.0. Affected by this vulnerability is the function _check_auth of the file gateway/platforms/api_server.py of the component API_SERVER_K… New CWE-287
Improper Authentication
CVE-2026-7112 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
266 5.6 MEDIUM
Network
- - A vulnerability was found in NousResearch hermes-agent 0.8.0. Affected by this issue is some unknown functionality of the file gateway/platforms/webhook.py of the component Webhooks Endpoint. The man… New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-7113 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
267 4.3 MEDIUM
Network
- - A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown processing of the file 370project/mark.php. Performing a manipulation results in c… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7116 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
268 6.3 MEDIUM
Network
- - A weakness has been identified in code-projects Employee Management System 1.0. Impacted is an unknown function of the file 370project/approve.php. Executing a manipulation of the argument id/token c… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7117 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
269 6.3 MEDIUM
Network
- - A security vulnerability has been detected in code-projects Employee Management System 1.0. The affected element is an unknown function of the file 370project/cancel.php. The manipulation of the argu… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7118 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm
270 7.3 HIGH
Network
- - A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_category. The manipulation of the argumen… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7126 2026-04-29 10:00 2026-04-27 Show GitHub Exploit DB Packet Storm