Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204521	7.5	重要 Network	Botan project	-	Botan におけるダウングレード攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2016-2850	2016-05-19 10:39	2016-03-17	Show	GitHub Exploit DB Packet Storm

204522	7.5	重要 Network	Debian Botan project	-	Botan における ECDSA 秘密鍵を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-2849	2016-05-19 10:39	2016-03-17	Show	GitHub Exploit DB Packet Storm

204523	9.8	緊急 Network	Botan project	-	Botan の P-521 reduction 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-2196	2016-05-19 10:39	2016-02-1	Show	GitHub Exploit DB Packet Storm

204524	9.8	緊急 Network	Debian Botan project	-	Botan の PointGFp コンストラクタにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-2195	2016-05-19 10:39	2016-02-1	Show	GitHub Exploit DB Packet Storm

204525	7.5	重要 Network	Debian Botan project	-	Botan の ressol 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-2194	2016-05-19 10:39	2016-02-1	Show	GitHub Exploit DB Packet Storm

204526	7.5	重要 Network	Debian Botan project	-	Botan におけるミリオンメッセージ攻撃を実行される脆弱性	CWE-200 情報漏えい	CVE-2015-7827	2016-05-19 10:39	2015-10-26	Show	GitHub Exploit DB Packet Storm

204527	7.5	重要 Network	Debian Botan project	-	Botan の BER デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-5726	2016-05-19 10:39	2015-08-3	Show	GitHub Exploit DB Packet Storm

204528	7.5	重要 Network	Botan project	-	Botan のミラー-ラビン素数判定法における暗号保護メカニズムを破られる脆弱性	CWE-310 暗号の問題	CVE-2014-9742	2016-05-19 10:39	2014-04-10	Show	GitHub Exploit DB Packet Storm

204529	9.8	緊急 Network	Debian Enlightenment	-	32-bit プラットフォーム上で稼動する imlib2 における整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-4024	2016-05-18 17:18	2016-05-1	Show	GitHub Exploit DB Packet Storm

204530	8.2	重要 Network	Debian Enlightenment	-	imlib2 の GIF ローダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-3994	2016-05-18 17:18	2016-05-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1	-		-	-	STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authen…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-25608	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

2	-		-	-	Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version…	CWE-261 Weak Encoding for Password	CVE-2026-25607	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

3	-		-	-	A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated …	CWE-89 SQL Injection	CVE-2026-25606	2026-05-22 19:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

4	7.5	HIGH Network	-	-	The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly…	CWE-862 Missing Authorization	CVE-2026-9011	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

5	4.3	MEDIUM Network	-	-	The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.1. This is due …	CWE-862 Missing Authorization	CVE-2026-8692	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

6	5.3	MEDIUM Network	-	-	The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verifying that a user is aut…	CWE-862 Missing Authorization	CVE-2026-8684	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

7	7.5	HIGH Network	-	-	The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() function (hooked to temp…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-8679	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

8	5.4	MEDIUM Network	-	-	A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not correctly enforce authorization checks, allowing an a…	CWE-862 Missing Authorization	CVE-2026-8381	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

9	5.4	MEDIUM Network	-	-	The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-7798	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm

10	4.3	MEDIUM Network	-	-	The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map_meta_cap. …	CWE-200 Information Exposure	CVE-2026-7636	2026-05-22 18:16	2026-05-22	Show	GitHub Exploit DB Packet Storm