Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
239281 4.3 警告 htmlpurifier - HTML Purifier の smoketests/configForm.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3498 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239282 5 警告 マイクロソフト - Microsoft Internet Explorer 7 におけるページ履歴の存在を特定される脆弱性 - CVE-2007-3497 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239283 6.8 警告 Papoo Software - Papoo CMS におけるデータベース全体を読まれる脆弱性 - CVE-2007-3494 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239284 7.5 危険 マイクロソフト
nctsoft products		 - NCTAudioStudio2 の NCTWavChunksEditor2.dll における任意のファイルを上書きされる脆弱性 - CVE-2007-3493 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239285 7.5 危険 マイクロソフト - Microsoft Excel 2003 SP2 における脆弱性 - CVE-2007-3490 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239286 6.4 警告 ヒューレット・パッカード - HP Photo Digital Imaging の hpqxml.dll における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-3487 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
239287 7.1 危険 pc soft - PCSoft WinDEV におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-3480 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
239288 6.8 警告 pc soft - PCSoft の WinDEV におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3479 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
239289 5 警告 LibGD project - libgd の imagearc 関数などにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-3477 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
239290 2.6 注意 LibGD project - libgd の GIF リーダにおける脆弱性 CWE-DesignError
CWE-noinfo
CVE-2007-3474 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2531 8.7 HIGH
Network 		- - authentik is an open-source identity provider. Versions 2025.12.4 and prior, and versions 2026.2.0-rc1 through 2026.2.2 were vulnerable to Authentication Bypass through SAML NameID XML Comment Inject… CWE-91
CWE-287
CWE-436
Blind XPath Injection
Improper Authentication
 Interpretation Conflict 		CVE-2026-40165 2026-05-22 00:24 2026-05-21 Show GitHub Exploit DB Packet Storm
2532 - - - A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring authentication, session tokens, or any form of … CWE-306
CWE-639
Missing Authentication for Critical Function
 Authorization Bypass Through User-Controlled Key 		CVE-2026-9152 2026-05-22 00:24 2026-05-21 Show GitHub Exploit DB Packet Storm
2533 8.4 HIGH
Local 		- - Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1. CWE-20
CWE-434
 Improper Input Validation 
 Unrestricted Upload of File with Dangerous Type  		CVE-2026-9157 2026-05-22 00:24 2026-05-21 Show GitHub Exploit DB Packet Storm
2534 5.3 MEDIUM
Network 		isc bind BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resou… CWE-408
 Incorrect Behavior Order: Early Amplification 		CVE-2026-3592 2026-05-22 00:24 2026-05-20 Show GitHub Exploit DB Packet Storm
2535 8.8 HIGH
Network 		- - An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, or cause a denial o… CWE-89
SQL Injection 		CVE-2026-44047 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm
2536 8.8 HIGH
Network 		- - A stack-based buffer overflow via UCS-2 type confusion in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of servi… CWE-121
Stack-based Buffer Overflow 		CVE-2026-44048 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm
2537 7.5 HIGH
Network 		- - An out-of-bounds write due to improper null termination in convert_charset() in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of serv… CWE-787
 Out-of-bounds Write 		CVE-2026-44049 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm
2538 9.9 CRITICAL
Network 		- - A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code with escalated privileges or cause… CWE-122
Heap-based Buffer Overflow 		CVE-2026-44050 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm
2539 8.1 HIGH
Network 		- - An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink c… CWE-59
Link Following 		CVE-2026-44051 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm
2540 7.5 HIGH
Network 		- - Netatalk 2.1.0 through 4.4.2 inserts LDAP simple-bind passwords into log output in cleartext, which allows an attacker with access to the log files to obtain LDAP credentials. CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2026-44052 2026-05-22 00:20 2026-05-21 Show GitHub Exploit DB Packet Storm