Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227251 7.5 危険 pozscripts - PozScripts TubeGuru Video Sharing Script の ugroups.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3674 2012-12-20 18:52 2008-08-13 Show GitHub Exploit DB Packet Storm
227252 7.5 危険 pozscripts - PozScripts Classified Ads の browsecats.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3673 2012-12-20 18:52 2008-08-13 Show GitHub Exploit DB Packet Storm
227253 7.5 危険 pozscripts - PozScripts Classified Ads の showcategory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3672 2012-12-20 18:52 2008-08-13 Show GitHub Exploit DB Packet Storm
227254 7.5 危険 ZeeScripts.com - ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3669 2012-12-20 18:52 2008-08-13 Show GitHub Exploit DB Packet Storm
227255 4.3 警告 xrms - XRMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3664 2012-12-20 18:52 2008-09-5 Show GitHub Exploit DB Packet Storm
227256 5 警告 Tiki Software Community Association - TikiWiki CMS/Groupware における "パスおよび PHP の設定" を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2008-3654 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
227257 10 危険 Tiki Software Community Association - TikiWiki CMS/Groupware における脆弱性 CWE-noinfo
情報不足 		CVE-2008-3653 2012-12-20 18:52 2008-08-4 Show GitHub Exploit DB Packet Storm
227258 6.5 警告 qbik - Qbik WinGate の IMAP サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3606 2012-12-20 18:52 2008-08-12 Show GitHub Exploit DB Packet Storm
227259 7.5 危険 ZeeScripts.com - ZeeBuddy の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3604 2012-12-20 18:52 2008-08-12 Show GitHub Exploit DB Packet Storm
227260 7.5 危険 vacation rentals - Vacation Rental Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3603 2012-12-20 18:52 2008-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
941 3.7 LOW
Network 		- - HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and … New - CVE-2025-59851 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
942 5.3 MEDIUM
Network 		- - HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could al… New CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2025-31970 2026-05-6 20:16 2026-05-6 Show GitHub Exploit DB Packet Storm
943 4.3 MEDIUM
Network 		- - A vulnerability was found in Open5GS up to 2.7.7. Impacted is the function udr_nudr_dr_handle_subscription_context of the file /src/udr/nudr-handler.c of the component UDR. The manipulation of the ar… Update CWE-404
 Improper Resource Shutdown or Release 		CVE-2026-7707 2026-05-6 06:16 2026-05-4 Show GitHub Exploit DB Packet Storm
944 9.8 CRITICAL
Network 		- - Buffer overflow vulnerability in cannelloni v2.0.0 in CAN frame parsing in parser.cpp in function parseCANFrame, and decoder.cpp in function decodeFrame allowing remote attackers to cause a denial of… Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-37539 2026-05-6 05:24 2026-05-2 Show GitHub Exploit DB Packet Storm
945 7.5 HIGH
Network 		- - An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Transfer_DM16 causing a denial of service via crafted CAN fra… Update CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-42467 2026-05-6 05:24 2026-05-2 Show GitHub Exploit DB Packet Storm
946 7.5 HIGH
Network 		- - AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library. The send_diagnostic_request function in uds.c allocates a 6-byte stack buffer (MAX_DIAGNOSTIC_PAYLOAD_SIZE=6) but … Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-42485 2026-05-6 05:24 2026-05-2 Show GitHub Exploit DB Packet Storm
947 7.5 HIGH
Network 		- - An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulnerability exists in the GeoNetworking packet processing pipeline where OpenS… Update CWE-248
 Uncaught Exception 		CVE-2026-37554 2026-05-6 05:24 2026-05-2 Show GitHub Exploit DB Packet Storm
948 8.4 HIGH
Local 		- - flipperzero-firmware commit ad2a80 was discovered to contain a stack overflow in the "Main" function. Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-30363 2026-05-6 05:24 2026-05-2 Show GitHub Exploit DB Packet Storm
949 6.1 MEDIUM
Network 		- - wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog. Update CWE-79
Cross-site Scripting 		CVE-2026-38669 2026-05-6 05:24 2026-05-5 Show GitHub Exploit DB Packet Storm
950 - - - Beets is the media library management system. Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode <%= ... %> for untrusted metadata fields. In this runtime, <%= ..… Update CWE-79
Cross-site Scripting 		CVE-2026-42052 2026-05-6 05:24 2026-05-5 Show GitHub Exploit DB Packet Storm