Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
237361 7.5 危険 nivisec - phpBB 用の Nivisec User Viewed Posts Tracker モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5223 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237362 5.1 警告 Objective Development Software GmbH - WebYep における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5220 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237363 5.1 警告 Moodle - Moodle の blog モジュールの blog/index.php における SQL インジェクションの脆弱性 - CVE-2006-5219 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237364 4.6 警告 OpenBSD
NetBSD		 - OpenBSD などの製品で使用される systrace_preprepl 関数における整数オーバーフローの脆弱性 - CVE-2006-5218 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237365 7.5 危険 Invision Power Services, Inc - Invision Gallery における SQL インジェクションの脆弱性 - CVE-2006-5206 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237366 5 警告 Invision Power Services, Inc - Invision Gallery におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5205 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237367 2.1 注意 Invision Power Services, Inc - IPB の action_admin/member.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5204 2012-09-25 15:36 2006-10-5 Show GitHub Exploit DB Packet Storm
237368 5.1 警告 Invision Power Services, Inc - IPB における SQL コマンドを実行される脆弱性 - CVE-2006-5203 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237369 5 警告 シスコシステムズ (Linksys) - Linksys WRT54g における任意の設定を変更される脆弱性 - CVE-2006-5202 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
237370 5 警告 pdshoppro - PDshopPro におけるデータベースをダウンロードされる脆弱性 - CVE-2006-5197 2012-09-25 15:36 2006-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
451 8.1 HIGH
Network 		- - In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL commands via a crafted… New CWE-89
SQL Injection 		CVE-2026-44331 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
452 - - - Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-se… New CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-40280 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
453 - - - PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0, when t… New CWE-502
CWE-918
 Deserialization of Untrusted Data
Server-Side Request Forgery (SSRF)  		CVE-2026-34084 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
454 - - - CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the transfer plugin can select the wrong ACL stanza when both a parent zone and a more-specific subzone are configured. The l… New CWE-863
 Incorrect Authorization 		CVE-2026-33489 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
455 - - - Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the get_org_collections_details endpoint (GET /api/organizations/{org_id}/collections/details) is missing … New CWE-862
 Missing Authorization 		CVE-2026-33420 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
456 - - - SQLBot is an intelligent Text-to-SQL system based on large language models and RAG. In versions 1.7.0 and earlier, the Text2SQL chat interface is vulnerable to prompt injection. The user-provided que… New CWE-89
SQL Injection 		CVE-2026-33324 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
457 - - - CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the DNS-over-HTTPS (DoH) GET path accepts oversized dns= query parameter values and performs URL query parsing, base64 decodi… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-32936 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
458 - - - FacturaScripts is an open source accounting and invoicing software. In versions 2025.92 and earlier, the application fails to validate the nick parameter during a POST request to the EditUser control… New CWE-472
 External Control of Assumed-Immutable Web Parameter 		CVE-2026-32699 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
459 - - - Tunnelblick is an open source graphic user interface for OpenVPN on macOS. In versions 3.3beta26 through 9.0beta01, any local user can read arbitrary root-owned files by exploiting a symlink followin… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-31893 2026-05-6 05:16 2026-05-6 Show GitHub Exploit DB Packet Storm
460 8.1 HIGH
Network 		- - School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data. Update CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-7491 2026-05-6 05:16 2026-05-2 Show GitHub Exploit DB Packet Storm