Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
237641 4.3 警告 Novell - Novell GroupWise WebAccess の webacc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2006-4220 2012-09-25 15:35 2006-12-31 Show GitHub Exploit DB Packet Storm
237642 7.5 危険 マイクロソフト - The Terminal Services COM object におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4219 2012-09-25 15:35 2006-08-18 Show GitHub Exploit DB Packet Storm
237643 7.5 危険 mamboxchange - Mambo 用の mmp コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4203 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
237644 7.5 危険 musicbrainz - libmusicbrainz および SVN 8406 におけるバッファオーバーフローの脆弱性 - CVE-2006-4197 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
237645 6.8 警告 mamboxchange - Mambo 用の peoplebook コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2006-4195 2012-09-25 15:35 2006-08-17 Show GitHub Exploit DB Packet Storm
237646 7.5 危険 マイクロソフト - Microsoft Internet Explorer 6.0 SP1 における任意のコードを実行される脆弱性 - CVE-2006-4193 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
237647 2.1 注意 Novell - Novell eDirectory の iManager におけるパスワードを取得される脆弱性 - CVE-2006-4186 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
237648 4.9 警告 Novell - Novell eDirectory の NCPENGINE におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-4185 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
237649 7.5 危険 Novell - Novell eDirectory の NCP エンジンにおけるヒープベースのバッファオーバーフローの脆弱性 - CVE-2006-4177 2012-09-25 15:35 2006-10-24 Show GitHub Exploit DB Packet Storm
237650 7.5 危険 mvcnphp - Tony Bibbs and Vincent Furia MVCnPHP における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-4160 2012-09-25 15:35 2006-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
81 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute `SET_NETDEV_DEV(dev, &priv->lowerdev->dev)` f… New - CVE-2026-31695 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
82 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized dirent size from the server-control… New - CVE-2026-31694 2026-05-3 16:16 2026-05-1 Show GitHub Exploit DB Packet Storm
83 7.8 HIGH
Local
- - In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code wher… New - CVE-2026-31693 2026-05-3 16:16 2026-04-30 Show GitHub Exploit DB Packet Storm
84 6.5 MEDIUM
Network
- - A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the comp… New CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7681 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
85 4.3 MEDIUM
Network
- - A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipu… New CWE-22
Path Traversal
CVE-2026-7680 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
86 7.2 HIGH
Network
- - The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via POST parameter key names in the submit_nex_form() function in versions up to,… New CWE-79
Cross-site Scripting
CVE-2026-5063 2026-05-3 15:15 2026-05-3 Show GitHub Exploit DB Packet Storm
87 7.3 HIGH
Network
- - A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01. This impacts the function getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/servi… New CWE-287
Improper Authentication
CVE-2026-7679 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
88 6.3 MEDIUM
Network
- - A vulnerability was identified in YunaiV yudao-cloud up to 2026.01. This affects the function getDataBySQL of the file yudao-module-report-biz/src/main/java/io/github/ruoyi/report/service/impl/GoView… New CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-7678 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
89 3.5 LOW
Network
- - A vulnerability was determined in kerwincui FastBee up to 1.2.1. The impacted element is the function Add of the file springboot/fastbee-admin/src/main/java/com/fastbee/web/controller/system/SysNotic… New CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2026-7677 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm
90 4.3 MEDIUM
Network
- - A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/control… New CWE-22
Path Traversal
CVE-2026-7676 2026-05-3 14:15 2026-05-3 Show GitHub Exploit DB Packet Storm