Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225521 4.3 警告 ProcessOne - ejabberd におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0934 2012-12-20 19:10 2009-03-17 Show GitHub Exploit DB Packet Storm
225522 7.5 危険 roman bogorodskiy - nForum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0882 2012-12-20 19:10 2009-03-12 Show GitHub Exploit DB Packet Storm
225523 5 警告 wesnoth - Wesnoth の src/terrain_translation.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0878 2012-12-20 19:10 2009-03-12 Show GitHub Exploit DB Packet Storm
225524 4.3 警告 tangocms - TangoCMS の admincp コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0862 2012-12-20 19:10 2009-02-18 Show GitHub Exploit DB Packet Storm
225525 6.8 警告 stewart howe - CelerBB の login.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0853 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
225526 5 警告 stewart howe - CelerBB の showme.php における "予約情報" を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0852 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
225527 6.8 警告 stewart howe - CelerBB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0851 2012-12-20 19:10 2009-03-9 Show GitHub Exploit DB Packet Storm
225528 7.8 危険 UMN - MapServer の mapser における任意のファイルの存在を特定される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0843 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
225529 4.3 警告 UMN - MapServer の mapserv における任意の無効な .map ファイルを読み取られる脆弱性 CWE-200
情報漏えい 		CVE-2009-0842 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
225530 10 危険 UMN - MapServer の mapserv におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0841 2012-12-20 19:10 2009-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 4.6 MEDIUM
Network 		- - SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting malicious STL template payloads t… New CWE-79
Cross-site Scripting 		CVE-2026-7429 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
352 7.2 HIGH
Network 		- - SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. Attack… New CWE-89
SQL Injection 		CVE-2026-7435 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
353 - - - CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overw… New CWE-120
Classic Buffer Overflow 		CVE-2026-33446 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
354 - - - CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrit… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-33447 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
355 - - - CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump t… New CWE-200
Information Exposure 		CVE-2026-33448 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
356 - - - CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message… New CWE-121
Stack-based Buffer Overflow 		CVE-2026-33449 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
357 - - - CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing… New CWE-125
Out-of-bounds Read 		CVE-2026-33450 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
358 - - - CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and … New CWE-125
Out-of-bounds Read 		CVE-2026-33451 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
359 - - - CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system. New CWE-121
Stack-based Buffer Overflow 		CVE-2026-33452 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm
360 - - - CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service. New CWE-121
Stack-based Buffer Overflow 		CVE-2026-40949 2026-05-2 00:28 2026-05-1 Show GitHub Exploit DB Packet Storm