Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207781 5 警告 Pidgin - Pidgin の libpurple 内の MXit プロトコルプラグインの markup.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3695 2015-06-19 16:43 2014-04-7 Show GitHub Exploit DB Packet Storm
207782 6.4 警告 Pidgin - Pidgin の libpurple にバンドルされている GnuTLS SSL/TLS および OpenSSL SSL/TLS プラグインにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-3694 2015-06-19 16:43 2014-10-12 Show GitHub Exploit DB Packet Storm
207783 5 警告 GNU Project - GnuPG の g10/compress.c の do_uncompress 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-4617 2015-06-19 16:43 2014-06-23 Show GitHub Exploit DB Packet Storm
207784 4.3 警告 アップル
Git project
- Git の imap-send コマンドにおける SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0308 2015-06-19 16:43 2013-03-4 Show GitHub Exploit DB Packet Storm
207785 5 警告 Armin Burgmeier - libnet6 の inc/server.hpp の libobby サーバにおける重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2011-4091 2015-06-19 16:43 2011-10-30 Show GitHub Exploit DB Packet Storm
207786 5 警告 Se Html5 Album Audio Player project - WordPress 用 SE HTML5 Album Audio Player プラグインの download_audio.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2015-4414 2015-06-19 16:27 2015-06-6 Show GitHub Exploit DB Packet Storm
207787 6.5 警告 XCloner - WordPress 用 XCloner プラグインにおける言語ファイルに PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション
CVE-2015-4338 2015-06-19 16:27 2015-05-10 Show GitHub Exploit DB Packet Storm
207788 3.5 注意 XCloner - WordPress 用 XCloner プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-4337 2015-06-19 16:27 2015-05-10 Show GitHub Exploit DB Packet Storm
207789 6.5 警告 XCloner - WordPress 用 XCloner プラグインの cloner.functions.php における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-4336 2015-06-19 16:27 2015-05-10 Show GitHub Exploit DB Packet Storm
207790 4.3 警告 Automattic Inc.
WordPress.org
- WordPress で使用される Genericons の example.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-3429 2015-06-19 16:27 2015-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 3.7 LOW
Network
- - mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest. New CWE-158
 Improper Neutralization of Null Byte or NUL Character
CVE-2026-43859 2026-05-4 16:16 2026-05-4 Show GitHub Exploit DB Packet Storm
202 - - - A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1. The vulnerability allows a tenant administrator to impersonate any end-user… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-29200 2026-05-4 16:16 2026-05-4 Show GitHub Exploit DB Packet Storm
203 - - - phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning. When force_server_vars is disabled, the servers hostname may be extracted from the HTTP Host … New CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2026-29199 2026-05-4 16:15 2026-05-4 Show GitHub Exploit DB Packet Storm
204 7.3 HIGH
Network
- - A vulnerability was found in osrg GoBGP up to 4.3.0. Affected is the function PathAttributeAigp.DecodeFromBytes of the file pkg/packet/bgp/bgp.go of the component AIGP Attribute Parser. Performing a … New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7735 2026-05-4 15:16 2026-05-4 Show GitHub Exploit DB Packet Storm
205 5.3 MEDIUM
Network
- - A vulnerability has been found in osrg GoBGP up to 4.3.0. This impacts the function SRv6L3ServiceAttribute.DecodeFromBytes of the file pkg/packet/bgp/prefix_sid.go of the component SRv6 L3 Service. S… New CWE-404
 Improper Resource Shutdown or Release
CVE-2026-7734 2026-05-4 15:16 2026-05-4 Show GitHub Exploit DB Packet Storm
206 7.3 HIGH
Network
- - A flaw has been found in funadmin up to 7.1.0-rc6. This affects the function UploadService::chunkUpload of the file app/common/service/UploadService.php of the component Frontend Chunked Upload Endpo… New CWE-284
CWE-434
Improper Access Control
 Unrestricted Upload of File with Dangerous Type 
CVE-2026-7733 2026-05-4 15:16 2026-05-4 Show GitHub Exploit DB Packet Storm
207 5.6 MEDIUM
Network
- - A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the component HuggingFace Transf… New CWE-74
CWE-94
Injection
Code Injection
CVE-2026-7669 2026-05-4 15:16 2026-05-3 Show GitHub Exploit DB Packet Storm
208 6.1 MEDIUM
Adjacent
- - A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-sco… Update CWE-312
 Cleartext Storage of Sensitive Information
CVE-2026-7163 2026-05-4 15:16 2026-04-30 Show GitHub Exploit DB Packet Storm
209 6.5 MEDIUM
Network
- - A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this issue is some unknown functionality of the file cps/cwa_functions.py of the component Admin Endpoint. This … New CWE-287
CWE-306
Improper Authentication
Missing Authentication for Critical Function
CVE-2026-7714 2026-05-4 10:16 2026-05-4 Show GitHub Exploit DB Packet Storm
210 6.3 MEDIUM
Network
- - A vulnerability was detected in crocodilestick Calibre-Web-Automated up to 4.0.6. Affected by this vulnerability is the function generate_auth_token of the file cps/kobo_auth.py of the component Kobo… New CWE-266
CWE-285
 Incorrect Privilege Assignment
Improper Authorization
CVE-2026-7713 2026-05-4 09:16 2026-05-4 Show GitHub Exploit DB Packet Storm