Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
236461 6.9 警告 manoj srivastava - dist における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4949 2012-09-25 17:17 2008-08-24 Show GitHub Exploit DB Packet Storm
236462 6.9 警告 nostatic - digitaldj の fest.pl における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4948 2012-09-25 17:17 2008-08-24 Show GitHub Exploit DB Packet Storm
236463 6.9 警告 guus sliepen - dhis-server の dhis-dummy-log-engine における任意をファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4947 2012-09-25 17:17 2008-11-5 Show GitHub Exploit DB Packet Storm
236464 6.9 警告 iglues - bulmages-servers における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2008-4943 2012-09-25 17:17 2008-08-24 Show GitHub Exploit DB Packet Storm
236465 5 警告 MyBB Group - MyBB における Internet Explorer のコンテンツ検査で HTML としてファイル処理される脆弱性 CWE-20
不適切な入力確認
CVE-2008-4930 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
236466 5 警告 MyBB Group - MyBB におけるアップロードされたファイルを読まれる脆弱性 CWE-310
暗号の問題
CVE-2008-4929 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
236467 4.3 警告 MyBB Group - MyBB の functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-4928 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
236468 4.3 警告 マイクロソフト - Microsoft Windows Media Player 9.0 から 11 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2008-4927 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
236469 9 危険 MW6 Technologies - MW6PDF417Lib.PDF417 などにおける任意のファイルを上書きされる脆弱性 CWE-noinfo
CWE-Other
CVE-2008-4926 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
236470 9 危険 MW6 Technologies - DATAMATRIXLib.MW6DataMatrix などにおける任意のファルを上書きされる脆弱性 CWE-noinfo
CWE-Other
CVE-2008-4925 2012-09-25 17:17 2008-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
981 5.9 MEDIUM
Local
- - Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840
 Business Logic Errors
CVE-2026-41968 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
982 6.2 MEDIUM
Physics
- - Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275
 Permission Issues
CVE-2026-41969 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
983 6.8 MEDIUM
Adjacent
- - Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787
 Out-of-bounds Write
CVE-2026-41970 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
984 5.5 MEDIUM
Local
- - Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-840
 Business Logic Errors
CVE-2026-41971 2026-05-15 23:08 2026-05-15 Show GitHub Exploit DB Packet Storm
985 8.3 HIGH
Network
pyload-ng_project pyload-ng pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the set_config_value() API method (@permission(Perms.SETTINGS)) in src/pyload/core/api/__init__.py gates … CWE-441
CWE-863
CWE-918
Confused Deputy
 Incorrect Authorization
Server-Side Request Forgery (SSRF) 
CVE-2026-42313 2026-05-15 23:04 2026-05-12 Show GitHub Exploit DB Packet Storm
986 6.7 MEDIUM
Local
fortinet fortiap
fortiap-u
fortiap-w2
An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5… CWE-78
OS Command 
CVE-2025-53680 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
987 7.2 HIGH
Network
fortinet fortimail An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5,… CWE-89
SQL Injection
CVE-2025-53681 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
988 8.8 HIGH
Network
fortinet fortios A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via spe… CWE-787
 Out-of-bounds Write
CVE-2025-53844 2026-05-15 23:04 2026-05-13 Show GitHub Exploit DB Packet Storm
989 5.3 MEDIUM
Network
fortinet fortianalyzer
fortimanager
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions,… CWE-676
 Use of Potentially Dangerous Function
CVE-2025-67604 2026-05-15 23:03 2026-05-13 Show GitHub Exploit DB Packet Storm
990 7.2 HIGH
Network
ivanti virtual_traffic_manager OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution. CWE-78
OS Command 
CVE-2026-8051 2026-05-15 22:58 2026-05-13 Show GitHub Exploit DB Packet Storm