Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
237261 10 危険 migcms - MiGCMS における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2888 2012-09-25 17:17 2008-06-27 Show GitHub Exploit DB Packet Storm
237262 9.3 危険 The Jamroom Network - Jamroom における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2886 2012-09-25 17:17 2008-06-21 Show GitHub Exploit DB Packet Storm
237263 9.3 危険 odars - ODARS の src/browser/resource/categories/resource_categories_view.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2885 2012-09-25 17:17 2008-06-27 Show GitHub Exploit DB Packet Storm
237264 7.5 危険 The Jamroom Network - Jamroom における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2883 2012-09-25 17:17 2008-06-21 Show GitHub Exploit DB Packet Storm
237265 9.3 危険 IBM - IBM AFP Viewer プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-2880 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
237266 7.5 危険 munky - mUnky の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-2876 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
237267 4.3 警告 pegames - PEGames の itemplate2.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2871 2012-09-25 17:17 2008-06-26 Show GitHub Exploit DB Packet Storm
237268 7.5 危険 kalptaru infotech - Kalptaru Infotech PHP Site Lock の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2865 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
237269 5 警告 Netwin Ltd - NetWin SurgeMail の IMAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-2859 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
237270 7.5 危険 ownrs - OwnRS Beta の clanek.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2856 2012-09-25 17:17 2008-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1981 7.8 HIGH
Local 		adobe after_effects After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of … CWE-787
 Out-of-bounds Write 		CVE-2026-34643 2026-05-14 04:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1982 7.8 HIGH
Local 		adobe after_effects After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Explo… CWE-190
 Integer Overflow or Wraparound 		CVE-2026-34644 2026-05-14 04:35 2026-05-13 Show GitHub Exploit DB Packet Storm
1983 6.5 MEDIUM
Network 		haxx curl libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. libcurl features a … CWE-613
 Insufficient Session Expiration 		CVE-2026-5545 2026-05-14 04:31 2026-05-13 Show GitHub Exploit DB Packet Storm
1984 8.1 HIGH
Network 		dani-garcia vaultwarden Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, Vaultwarden allows an unconfirmed organization owner to purge the entire organization vault. The organization invite flo… CWE-863
 Incorrect Authorization 		CVE-2026-43913 2026-05-14 04:29 2026-05-12 Show GitHub Exploit DB Packet Storm
1985 5.3 MEDIUM
Network 		leont crypt\ Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input. The auto-detect form of argon2_verify passes encoded_len - 1 as the… CWE-126
CWE-191
 Buffer Over-read
 Integer Underflow (Wrap or Wraparound) 		CVE-2026-8463 2026-05-14 04:23 2026-05-13 Show GitHub Exploit DB Packet Storm
1986 6.8 MEDIUM
Physics 		zte zx297520v3_firmware ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any … CWE-787
 Out-of-bounds Write 		CVE-2026-40003 2026-05-14 04:19 2026-05-7 Show GitHub Exploit DB Packet Storm
1987 7.8 HIGH
Local 		zte zxcloud_irai There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges. CWE-427
 Uncontrolled Search Path Element 		CVE-2026-40004 2026-05-14 04:17 2026-05-7 Show GitHub Exploit DB Packet Storm
1988 - - - GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git r… CWE-696
 Incorrect Behavior Order 		CVE-2026-45033 2026-05-14 04:17 2026-05-14 Show GitHub Exploit DB Packet Storm
1989 - - - Rejected reason: REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-40520. Reason: This candidate is a duplicate of CVE-2026-40520. Notes: All CVE users should reference CVE-2026-40520 … - CVE-2026-41410 2026-05-14 04:17 2026-05-14 Show GitHub Exploit DB Packet Storm
1990 6.5 MEDIUM
Network 		- - qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysUserMapper.xml file. This vulnerability allows attackers to access sensitive dat… CWE-89
SQL Injection 		CVE-2026-37429 2026-05-14 04:17 2026-05-13 Show GitHub Exploit DB Packet Storm