Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
233201 7.5 危険 infuseum - ASP Message Board の boards/printer.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5887 2012-09-25 16:59 2007-11-7 Show GitHub Exploit DB Packet Storm
233202 7.5 危険 GuppYTeam - GuppY の error.php におけるディレクトリトラバーサルの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5845 2012-09-25 16:59 2007-11-6 Show GitHub Exploit DB Packet Storm
233203 4.3 警告 Nagios Enterprises, LLC - Nagios の CGI プログラムにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5803 2012-09-25 16:59 2008-05-13 Show GitHub Exploit DB Packet Storm
233204 7.2 危険 Novell - Novell NetWare Client で使用される cdriver における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2007-5762 2012-09-25 16:59 2008-01-9 Show GitHub Exploit DB Packet Storm
233205 7.2 危険 Motorola Solutions, Inc - Motorola netOctopus の NantSys デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5761 2012-09-25 16:59 2008-01-8 Show GitHub Exploit DB Packet Storm
233206 6.9 警告 IBM - IBM DB2 Universal Database の db2dasrrm におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5758 2012-09-25 16:59 2008-04-16 Show GitHub Exploit DB Packet Storm
233207 6.9 警告 IBM - IBM DB2 UDB の db2pd における root 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5757 2012-09-25 16:59 2008-02-12 Show GitHub Exploit DB Packet Storm
233208 7.5 危険 GuppYTeam - GuppY の inc/includes.inc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5844 2012-09-25 16:59 2007-11-6 Show GitHub Exploit DB Packet Storm
233209 6.8 警告 nuboard - nuBoard の admin/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-5841 2012-09-25 16:59 2007-11-6 Show GitHub Exploit DB Packet Storm
233210 2.1 注意 iscsitarget - iscsitarget におけるパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5827 2012-09-25 16:59 2007-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1821 6.1 MEDIUM
Network
pi-hole web_interface Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, configuration values from the /api/config endpoi… CWE-79
Cross-site Scripting
CVE-2026-33406 2026-04-14 11:04 2026-04-7 Show GitHub Exploit DB Packet Storm
1822 7.8 HIGH
Local
twitch twitch_studio Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary code as root by exploiting an unpro… CWE-862
 Missing Authorization
CVE-2024-14032 2026-04-14 11:01 2026-04-7 Show GitHub Exploit DB Packet Storm
1823 7.5 HIGH
Network
fedify fedify
vocab-runtime
Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote doc… CWE-400
CWE-770
 Uncontrolled Resource Consumption
 Allocation of Resources Without Limits or Throttling
CVE-2026-34148 2026-04-14 10:58 2026-04-7 Show GitHub Exploit DB Packet Storm
1824 5.0 MEDIUM
Network
openstack glance OpenStack Glance before 29.1.1, 30.x before 30.1.1, and 31.0.0 is affected by Server-Side Request Forgery (SSRF). By use of HTTP redirects, an authenticated user can bypass URL validation checks and … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-34881 2026-04-14 10:51 2026-03-31 Show GitHub Exploit DB Packet Storm
1825 5.0 MEDIUM
Network
openstack glance OpenStack Glance <29.1.1, >=30.0.0 <30.1.1, ==31.0.0 se ve afectado por Falsificación de Petición del Lado del Servidor (SSRF). Mediante el uso de redirecciones HTTP, un usuario autenticado … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-34881 2026-04-14 10:51 2026-03-31 Show GitHub Exploit DB Packet Storm
1826 5.3 MEDIUM
Network
tautulli tautulli Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /pms_image_proxy endpoint accepts a user-supplied img parameter and forwards it to Plex Med… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-31804 2026-04-14 10:43 2026-03-31 Show GitHub Exploit DB Packet Storm
1827 5.3 MEDIUM
Network
tautulli tautulli Tautulli es una herramienta de monitoreo y seguimiento basada en Python para Plex Media Server. Antes de la versión 2.17.0, el endpoint /pms_image_proxy acepta un parámetro 'img' proporcionado por el… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-31804 2026-04-14 10:43 2026-03-31 Show GitHub Exploit DB Packet Storm
1828 5.3 MEDIUM
Network
wwbn avideo WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `categories.json.php` endpoint, which serves the category listing API, fails to enforce user group-based access… CWE-863
 Incorrect Authorization
CVE-2026-34364 2026-04-14 10:22 2026-03-28 Show GitHub Exploit DB Packet Storm
1829 6.1 MEDIUM
Network
xinliangcoder php_api_doc XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arbitrary JavaScript in a victim's … CWE-79
Cross-site Scripting
CVE-2026-32844 2026-04-14 10:19 2026-03-21 Show GitHub Exploit DB Packet Storm
1830 6.1 MEDIUM
Network
xinliangcoder php_api_doc XinLiangCoder php_api_doc a través del commit 1ce5bbf contiene una vulnerabilidad de cross-site scripting reflejado en list_method.php que permite a atacantes remotos ejecutar JavaScript arbitrario e… CWE-79
Cross-site Scripting
CVE-2026-32844 2026-04-14 10:19 2026-03-21 Show GitHub Exploit DB Packet Storm