Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
238741 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4357 2012-08-21 15:30 2012-07-17 Show GitHub Exploit DB Packet Storm
238742 4.3 警告 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4356 2012-08-21 15:22 2012-07-17 Show GitHub Exploit DB Packet Storm
238743 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2012-4355 2012-08-21 15:21 2012-07-31 Show GitHub Exploit DB Packet Storm
238744 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2012-4354 2012-08-21 15:19 2012-07-17 Show GitHub Exploit DB Packet Storm
238745 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4353 2012-08-21 15:17 2012-07-17 Show GitHub Exploit DB Packet Storm
238746 4.3 警告 IBM - IBM Power Hardware Management Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3296 2012-08-21 15:15 2012-08-8 Show GitHub Exploit DB Packet Storm
238747 3.5 注意 IBM - IBM Rational ClearQuest におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2205 2012-08-21 15:09 2012-04-2 Show GitHub Exploit DB Packet Storm
238748 3.5 注意 IBM - IBM Rational ClearQuest の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2169 2012-08-21 15:05 2012-04-18 Show GitHub Exploit DB Packet Storm
238749 4 警告 IBM - IBM Rational ClearQuest における重要なスタックトレース情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2168 2012-08-21 15:03 2012-04-4 Show GitHub Exploit DB Packet Storm
238750 3.5 注意 IBM - IBM Rational ClearQuest におけるパスワードハッシュを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-2165 2012-08-21 14:24 2012-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
661 - - - Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Trans… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-32689 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
662 - - - The traceroute diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing aut… New - CVE-2026-31196 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
663 - - - The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authentic… New - CVE-2026-31195 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
664 6.5 MEDIUM
Network 		- - Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, the default key generator in the cache middleware uses only the request path and does not include the query str… New CWE-436
 Interpretation Conflict 		CVE-2026-30246 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm
665 5.4 MEDIUM
Network 		- - Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geofence, and driver n… New CWE-79
Cross-site Scripting 		CVE-2026-27694 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm
666 9.8 CRITICAL
Network 		- - Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file… New CWE-122
Heap-based Buffer Overflow 		CVE-2025-70067 2026-05-6 01:16 2026-05-4 Show GitHub Exploit DB Packet Storm
667 8.1 HIGH
Network 		- - IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authen… New CWE-284
Improper Access Control 		CVE-2025-67796 2026-05-6 01:16 2026-05-5 Show GitHub Exploit DB Packet Storm
668 - - - Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._red… New CWE-601
Open Redirect 		CVE-2025-61669 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
669 - - - ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage. New - CVE-2025-52206 2026-05-6 01:16 2026-05-6 Show GitHub Exploit DB Packet Storm
670 4.9 MEDIUM
Network 		sonicwall sonicos A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. Update CWE-121
Stack-based Buffer Overflow 		CVE-2026-0206 2026-05-6 01:12 2026-04-30 Show GitHub Exploit DB Packet Storm