Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202971 5 警告 Squid-cache.org - Squid の http.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2571 2016-03-15 15:23 2016-02-23 Show GitHub Exploit DB Packet Storm
202972 5 警告 Squid-cache.org - Squid の Edge Side Includes パーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2570 2016-03-15 15:23 2016-02-23 Show GitHub Exploit DB Packet Storm
202973 5 警告 Squid-cache.org - Squid におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2569 2016-03-15 15:23 2016-02-23 Show GitHub Exploit DB Packet Storm
202974 10 危険 デル - 複数の Dell SonicWALL 製品の cliserver の実装における逆シリアル化される脆弱性 CWE-Other
その他
CVE-2016-2397 2016-03-15 15:23 2016-02-10 Show GitHub Exploit DB Packet Storm
202975 4.3 警告 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway の管理 Web インターフェースにおけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-2072 2016-03-15 14:55 2016-02-10 Show GitHub Exploit DB Packet Storm
202976 10 危険 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2071 2016-03-15 14:55 2016-02-10 Show GitHub Exploit DB Packet Storm
202977 5 警告 Ruby on Rails project - Ruby on Rails の Active Record の activerecord/lib/active_record/nested_attributes.rb における変更制限を回避される脆弱性 CWE-Other
その他
CVE-2015-7577 2016-03-15 14:33 2015-11-27 Show GitHub Exploit DB Packet Storm
202978 4.3 警告 Ruby on Rails project - Ruby on Rails の Action Controller の Basic 認証の実装における認証を回避される脆弱性 CWE-Other
その他
CVE-2015-7576 2016-03-15 14:33 2015-10-29 Show GitHub Exploit DB Packet Storm
202979 4 警告 Digium - Asterisk Open Source および Certified Asterisk におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2232 2016-03-15 14:07 2016-02-3 Show GitHub Exploit DB Packet Storm
202980 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1009 2016-03-15 11:43 2016-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
371 6.5 MEDIUM
Network
- - The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6. This is due to a flawed authorization logic in the nonce_permiss… New CWE-862
 Missing Authorization
CVE-2026-4807 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
372 6.5 MEDIUM
Network
- - The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0. This is due to the listen_for_saving_export_schedule() function in library/cla… New CWE-862
 Missing Authorization
CVE-2026-6214 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
373 8.8 HIGH
Network
- - The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function. This is due to insufficient fil… New CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-6692 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
374 7.5 HIGH
Network
- - The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0. This is du… New CWE-89
SQL Injection
CVE-2026-4348 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
375 8.1 HIGH
Network
- - The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat… New CWE-22
Path Traversal
CVE-2026-7252 2026-05-7 23:00 2026-05-7 Show GitHub Exploit DB Packet Storm
376 4.3 MEDIUM
Network
google chrome Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted C… New CWE-693
 Protection Mechanism Failure
CVE-2026-8004 2026-05-7 22:54 2026-05-7 Show GitHub Exploit DB Packet Storm
377 4.3 MEDIUM
Adjacent
google chrome Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicious network traffic.… New CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-8005 2026-05-7 22:54 2026-05-7 Show GitHub Exploit DB Packet Storm
378 8.8 HIGH
Network
redistimeseries redistimeseries RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE comma… New CWE-122
Heap-based Buffer Overflow
CVE-2026-25588 2026-05-7 22:46 2026-05-6 Show GitHub Exploit DB Packet Storm
379 8.8 HIGH
Network
redisbloom redisbloom RedisBloom is a probabilistic data structures module for Redis. In all versions of RedisBloom before 2.8.20, the module does not properly validate serialized values processed through the Redis RESTOR… New CWE-122
Heap-based Buffer Overflow
CVE-2026-25589 2026-05-7 22:44 2026-05-6 Show GitHub Exploit DB Packet Storm
380 7.5 HIGH
Network
owasp modsecurity ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Libmodsecurity is one component of the ModSecurity v3 project. A segmentation fault occu… New CWE-125
Out-of-bounds Read
CVE-2026-30923 2026-05-7 22:41 2026-05-6 Show GitHub Exploit DB Packet Storm