Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220541 4.3 警告 SAP - SAP NetWeaver の JavaDumpService および DataCollector サーブレットにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6816 2013-11-21 16:47 2013-10-30 Show GitHub Exploit DB Packet Storm
220542 5 警告 SAP - SAP NetWeaver の ABAP 用アプリケーションサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6815 2013-11-21 16:43 2013-10-30 Show GitHub Exploit DB Packet Storm
220543 5.8 警告 SAP - SAP NetWeaver の J2EE Engine におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6814 2013-11-21 16:40 2013-10-30 Show GitHub Exploit DB Packet Storm
220544 2.6 注意 LIGHTTPD
Debian		 - lighttpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-4560 2013-11-21 16:08 2013-11-13 Show GitHub Exploit DB Packet Storm
220545 7.6 危険 LIGHTTPD
Debian		 - lighttpd における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4559 2013-11-21 16:07 2013-11-13 Show GitHub Exploit DB Packet Storm
220546 10 危険 Adaptive Computing - Terascale Open-Source Resource and Queue Manager の server/svr_mail.c における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-4495 2013-11-21 15:59 2013-11-13 Show GitHub Exploit DB Packet Storm
220547 7.2 危険 Linux - v6k および v7 ARM プラットフォーム上で稼働する Linux Kernel の API 関数における任意のカーネルメモリ領域のコンテンツを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6282 2013-11-21 15:56 2013-11-14 Show GitHub Exploit DB Packet Storm
220548 6.6 警告 Linux - Linux Kernel の net/netfilter/ipvs/ip_vs_ctl.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4588 2013-11-21 15:55 2013-11-15 Show GitHub Exploit DB Packet Storm
220549 4.3 警告 Linux - Linux Kernel の drivers/net/wireless/ath/ath9k/htc_drv_main.c における MAC アドレス偽装後に元の MAC アドレスを取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-4579 2013-11-21 15:55 2013-11-10 Show GitHub Exploit DB Packet Storm
220550 7.1 危険 Linux - Linux Kernel の net/ipv6/udp_offload.c の udp6_ufo_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2013-4563 2013-11-21 15:55 2013-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1321 6.3 MEDIUM
Network 		- - A vulnerability was determined in CodeAstro Online Classroom 1.0. This impacts an unknown function of the file /OnlineClassroom/facultydetails. This manipulation of the argument deleteid causes sql i… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7745 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1322 6.3 MEDIUM
Network 		- - A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file /product_expiry/edit-admin.php. Such manipulation of the… CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-7746 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1323 9.8 CRITICAL
Network 		- - A security flaw has been discovered in Totolink N300RH 3.2.4-B20220812. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. P… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7747 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1324 8.8 HIGH
Network 		- - A weakness has been identified in Totolink N300RH 3.2.4-B20220812. Affected by this issue is the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Executin… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7748 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1325 8.8 HIGH
Network 		- - A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manip… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7749 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1326 8.8 HIGH
Network 		- - A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The … CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-7750 2026-05-5 00:17 2026-05-4 Show GitHub Exploit DB Packet Storm
1327 6.5 MEDIUM
Network 		vmware spring_framework A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstances, temp files may remain not deleted after the request is fully pr… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22740 2026-05-4 23:51 2026-04-29 Show GitHub Exploit DB Packet Storm
1328 3.1 LOW
Network 		vmware spring_framework Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: * the ap… CWE-524
 Use of Cache Containing Sensitive Information 		CVE-2026-22741 2026-05-4 23:51 2026-04-29 Show GitHub Exploit DB Packet Storm
1329 5.3 MEDIUM
Network 		vmware spring_framework Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-22745 2026-05-4 23:50 2026-04-29 Show GitHub Exploit DB Packet Storm
1330 9.8 CRITICAL
Network 		nvidia nvflare NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass through user-controlled key. A succ… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-24178 2026-05-4 23:34 2026-04-29 Show GitHub Exploit DB Packet Storm