Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
236891 6 警告 Invision Power Services, Inc - IP.Board のサブスクリプションマネージャにおけるメンバ ID を変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4914 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
236892 7.5 危険 Invision Power Services, Inc - IP.Board の ips_kernel/class_upload.php におけるスクリプトファイルをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4913 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
236893 4.3 警告 Invision Power Services, Inc - IP.Board の ips_kernel/class_ajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4912 2012-09-25 16:59 2007-09-12 Show GitHub Exploit DB Packet Storm
236894 10 危険 netinvoicing - netInvoicing における脆弱性 CWE-noinfo
情報不足 		CVE-2007-4910 2012-09-25 16:59 2007-09-17 Show GitHub Exploit DB Packet Storm
236895 6.8 警告 nuclearbb - NuclearBB の tasks/send_queued_emails.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-4906 2012-09-25 16:59 2007-09-17 Show GitHub Exploit DB Packet Storm
236896 6.8 警告 マイクロソフト - Microsoft Visual Studio 6.0 の PDWizard.ocx における任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2007-4891 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
236897 5.8 警告 マイクロソフト - Microsoft Visual Studio 6.0 の VBTOVSI.DLL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-4890 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
236898 6.8 警告 The PHP Group - PHP の MySQL エクステンションにおける open_basedir 制限を回避される脆弱性 CWE-DesignError
CVE-2007-4889 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
236899 4.3 警告 media player classic - MPC におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2007-4884 2012-09-25 16:59 2007-09-13 Show GitHub Exploit DB Packet Storm
236900 4.3 警告 MediaWiki - MediaWiki の BotQuery エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4883 2012-09-25 16:59 2007-09-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
781 - - - In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov5647: Initialize subdev before controls In ov5647_init_controls() we call v4l2_get_subdevdata, but it is initialize… Update - CVE-2026-43312 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
782 - - - In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pm_runtime_put_sync() with pm_runtime_dont_use_autosuspen… Update - CVE-2026-43301 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
783 - - - In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIG_DMA_API_DEBUG enabled, the kernel occa… Update - CVE-2026-43302 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
784 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: clear page->private in free_pages_prepare() Several subsystems (slub, shmem, ttm, etc.) use page->private but don'… Update - CVE-2026-43303 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
785 - - - In the Linux kernel, the following vulnerability has been resolved: bpf: crypto: Use the correct destructor kfunc type With CONFIG_CFI enabled, the kernel strictly enforces that indirect function c… Update - CVE-2026-43306 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
786 - - - In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for s… Update - CVE-2026-43317 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
787 - - - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dsc eDP issue [why] Need to add function hook check before use Update - CVE-2026-43320 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
788 7.8 HIGH
Local 		- - In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps For a `gotox rX` instruction the rX register should be marked as used in the… Update - CVE-2026-43321 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
789 - - - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E related command when not supported MCC_ALLOWED_AP_TYPE_CMD is related to 6E support. Do not s… Update - CVE-2026-43325 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm
790 - - - In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails, cpufreq_dbs_gover… Update - CVE-2026-43328 2026-05-12 23:10 2026-05-8 Show GitHub Exploit DB Packet Storm