Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207881 3.5 注意 Webform project - Drupal 用 Webform モジュールのビューベースの Web フォーム結果表におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-4356 2015-06-17 16:45 2015-03-3 Show GitHub Exploit DB Packet Storm
207882 6.8 警告 Watchdog Aggregator project - Drupal 用 Watchdog Aggregator モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-4355 2015-06-17 16:45 2015-02-25 Show GitHub Exploit DB Packet Storm
207883 2.6 注意 SMS Framework project - Drupal 用 SMS Framework モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-4346 2015-06-17 16:45 2015-02-23 Show GitHub Exploit DB Packet Storm
207884 5 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールの RESTWS Basic Auth サブモジュールにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-4345 2015-06-17 16:45 2015-02-18 Show GitHub Exploit DB Packet Storm
207885 5 警告 Services Basic Authentication project - Drupal 用 Services Basic Authentication モジュールにおけるリソース制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-4344 2015-06-17 16:45 2015-02-18 Show GitHub Exploit DB Packet Storm
207886 2.6 注意 ASUS JAPAN株式会社 - 複数の ASUS 製無線 LAN ルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-7270 2015-06-17 16:41 2015-01-27 Show GitHub Exploit DB Packet Storm
207887 5.2 警告 ASUS JAPAN株式会社 - 複数の ASUS 製無線 LAN ルータにおける OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-7269 2015-06-17 16:41 2015-01-27 Show GitHub Exploit DB Packet Storm
207888 8.8 危険 N-TRON Corp. - N-Tron 702-W Industrial Wireless Access Point デバイスにおける暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題
CVE-2012-4716 2015-06-17 10:08 2012-08-28 Show GitHub Exploit DB Packet Storm
207889 7.8 危険 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-2341 2015-06-16 18:13 2015-06-9 Show GitHub Exploit DB Packet Storm
207890 5.8 警告 VMware - 複数の VMware 製品の TPView.dll におけるホスト OS 上で任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2015-2336 2015-06-16 18:13 2015-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
11 7.3 HIGH
Network
- - A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMi… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7694 2026-05-3 21:15 2026-05-3 Show GitHub Exploit DB Packet Storm
12 6.3 MEDIUM
Network
- - A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS re… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7692 2026-05-3 20:16 2026-05-3 Show GitHub Exploit DB Packet Storm
13 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the argument command lea… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7691 2026-05-3 20:16 2026-05-3 Show GitHub Exploit DB Packet Storm
14 6.3 MEDIUM
Network
- - A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes … New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7690 2026-05-3 19:16 2026-05-3 Show GitHub Exploit DB Packet Storm
15 3.7 LOW
Network
- - A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library htdocs/core/lib/security.lib.php of the component Online Si… New CWE-345
CWE-347
 Insufficient Verification of Data Authenticity
 Improper Verification of Cryptographic Signature
CVE-2026-7689 2026-05-3 19:16 2026-05-3 Show GitHub Exploit DB Packet Storm
16 5.0 MEDIUM
Network
- - A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endp… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7688 2026-05-3 19:16 2026-05-3 Show GitHub Exploit DB Packet Storm
17 6.3 MEDIUM
Network
- - A vulnerability was determined in langflow-ai langflow up to 1.8.4. Affected by this issue is the function CodeParser.parse_callable_details of the file src/lfx/src/lfx/custom/code_parser/code_parser… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-7687 2026-05-3 18:16 2026-05-3 Show GitHub Exploit DB Packet Storm
18 5.3 MEDIUM
Network
- - A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activa… New CWE-266
CWE-284
 Incorrect Privilege Assignment
Improper Access Control
CVE-2026-7686 2026-05-3 17:16 2026-05-3 Show GitHub Exploit DB Packet Storm
19 8.8 HIGH
Network
- - A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway  results in buffer ove… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7685 2026-05-3 16:16 2026-05-3 Show GitHub Exploit DB Packet Storm
20 8.8 HIGH
Network
- - A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway  leads to buffe… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-7684 2026-05-3 16:16 2026-05-3 Show GitHub Exploit DB Packet Storm