Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226881 5 警告 webcamxp - webcamXP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5862 2012-12-20 19:10 2009-01-6 Show GitHub Exploit DB Packet Storm
226882 4 警告 シックス・アパート株式会社 - Six Apart MT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5846 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
226883 7.5 危険 phpicalendar - PHP iCalendar における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5840 2012-12-20 19:10 2009-01-5 Show GitHub Exploit DB Packet Storm
226884 6.8 警告 web scribble solutions - Web Scribble Solutions webClassifieds の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5817 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
226885 7.5 危険 phpalumni - phpAlumni の Acomment.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5815 2012-12-20 19:10 2009-01-2 Show GitHub Exploit DB Packet Storm
226886 7.5 危険 SPIP - SPIP の inc/rubriques.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5813 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
226887 10 危険 SPIP - SPIP における脆弱性 CWE-noinfo
情報不足 		CVE-2008-5812 2012-12-20 19:10 2008-12-24 Show GitHub Exploit DB Packet Storm
226888 4.3 警告 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-5807 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226889 10 危険 TYPO3 Association - TYPO3 用の Dictionary エクステンションにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-5801 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
226890 7.5 危険 TYPO3 Association - TYPO3 用の fsmi_people エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5800 2012-12-20 19:10 2008-12-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1421 5.5 MEDIUM
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the pee… NVD-CWE-noinfo
CVE-2026-31692 2026-05-7 05:05 2026-04-30 Show GitHub Exploit DB Packet Storm
1422 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c The build id returned by HYPERVISOR_xen_version(XENVER_build_id) is neither NUL t… CWE-787
 Out-of-bounds Write 		CVE-2026-31786 2026-05-7 04:44 2026-04-30 Show GitHub Exploit DB Packet Storm
1423 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but neither .may_split nor .open. W… CWE-415
 Double Free 		CVE-2026-31787 2026-05-7 04:38 2026-04-30 Show GitHub Exploit DB Packet Storm
1424 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-control… NVD-CWE-noinfo
CVE-2026-31694 2026-05-7 04:23 2026-05-1 Show GitHub Exploit DB Packet Storm
1425 3.9 LOW
Network 		- - HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system comp… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2025-31974 2026-05-7 04:20 2026-05-7 Show GitHub Exploit DB Packet Storm
1426 8.8 HIGH
Network 		- - Vvveb before version 1.0.8.2 contains an authenticated remote code execution vulnerability in the admin code editor that allows low-privilege authenticated users to execute arbitrary code by exploiti… CWE-184
 Incomplete Blacklist 		CVE-2026-41934 2026-05-7 04:20 2026-05-7 Show GitHub Exploit DB Packet Storm
1427 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv->lowerdev->dev)` f… CWE-416
 Use After Free 		CVE-2026-31695 2026-05-7 04:19 2026-05-1 Show GitHub Exploit DB Packet Storm
1428 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there are two paths for parsing key… CWE-787
 Out-of-bounds Write 		CVE-2026-31696 2026-05-7 04:17 2026-05-1 Show GitHub Exploit DB Packet Storm
1429 9.8 CRITICAL
Network 		- - OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml. CWE-611
XXE 		CVE-2026-38429 2026-05-7 04:16 2026-05-6 Show GitHub Exploit DB Packet Storm
1430 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for the CPU, don't attempt to cop… CWE-787
 Out-of-bounds Write 		CVE-2026-31697 2026-05-7 04:08 2026-05-1 Show GitHub Exploit DB Packet Storm