Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220031 4.3 警告 fuzzymonkey
m blom		 - My Blog などの製品で使用される M. Blom HTML::BBCode におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0735 2014-03-11 17:43 2006-02-16 Show GitHub Exploit DB Packet Storm
220032 7.5 危険 virtual hosting control system - Virtual Hosting Control System における許可されていないアクセス権を取得される脆弱性 - CVE-2006-0684 2014-03-11 17:43 2006-02-15 Show GitHub Exploit DB Packet Storm
220033 7.8 危険 sony ericsson - 複数の Sony Ericsson 製品におけるバッファオーバーフローの脆弱性 - CVE-2006-0671 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220034 5 警告 BlueZ Project - hcidump におけるバッファオーバーフローの脆弱性 - CVE-2006-0670 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220035 4.3 警告 Mantis - Mantis におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0664 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220036 7.5 危険 hinton design - Hinton Design phpht Topsites における認証を回避される脆弱性 - CVE-2006-0654 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220037 4.3 警告 cpaint - CPAINT library におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0650 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220038 4.3 警告 dataparksearch - DataparkSearch におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-0649 2014-03-11 17:43 2006-02-13 Show GitHub Exploit DB Packet Storm
220039 7.5 危険 クアルコム - QUALCOMM Eudora WorldMail におけるバッファオーバーフローの脆弱性 - CVE-2006-0637 2014-03-11 17:43 2006-02-10 Show GitHub Exploit DB Packet Storm
220040 5 警告 erik c. thauvin - Erik C. Thauvin mailback における CRLF インジェクションの脆弱性 - CVE-2006-0631 2014-03-11 17:43 2006-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1991 6.1 MEDIUM
Network 		- - Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record Function CWE-79
Cross-site Scripting 		CVE-2026-36906 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1992 - - - SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution… - CVE-2026-36962 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1993 8.1 HIGH
Network 		- - HireFlow v1.2 is vulnerable to Incorrect Access Control. The application does not enforce object-level authorization on the /candidate/<id> and /interview/<id> endpoints. The route handlers retrieve … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-38568 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1994 5.4 MEDIUM
Network 		- - HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add. CWE-79
Cross-site Scripting 		CVE-2026-38569 2026-05-13 00:05 2026-05-12 Show GitHub Exploit DB Packet Storm
1995 5.3 MEDIUM
Network 		uriparser_project uriparser In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal. CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2026-44928 2026-05-13 00:00 2026-05-8 Show GitHub Exploit DB Packet Storm
1996 5.3 MEDIUM
Network 		sync-in sync-in_server Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthen… CWE-208
 Information Exposure Through Timing Discrepancy 		CVE-2026-41161 2026-05-13 00:00 2026-05-8 Show GitHub Exploit DB Packet Storm
1997 5.3 MEDIUM
Network 		angular angular Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Se… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-41423 2026-05-12 23:58 2026-05-8 Show GitHub Exploit DB Packet Storm
1998 7.5 HIGH
Network 		- - An issue was discovered in kosma minmea 0.3.0. The minmea_scan functions format specifier copies NMEA field data to a caller-provided buffer without a size parameter. Applications using minmea_scan o… CWE-121
Stack-based Buffer Overflow 		CVE-2026-29974 2026-05-12 23:51 2026-05-9 Show GitHub Exploit DB Packet Storm
1999 7.5 HIGH
Network 		- - lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser (lwjson_stream.c). The end-of-string detection logic incorrectly identifies escaped quote characters by o… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2026-29975 2026-05-12 23:51 2026-05-9 Show GitHub Exploit DB Packet Storm
2000 9.1 CRITICAL
Network 		- - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, an authenticated user with administrative privileges can achieve Remote Code Execution (RCE) by uploading a specially crafted ZIP file throug… CWE-94
Code Injection 		CVE-2026-42607 2026-05-12 23:51 2026-05-12 Show GitHub Exploit DB Packet Storm