Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
239911 4.3 警告 lovecms - LoveCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1151 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239912 3.6 注意 lovecms - LoveCMS における /modules/content/pictures/tmp/ へ任意のファイルをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-1150 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239913 5 警告 lovecms - LoveCMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1149 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239914 7.5 危険 lovecms - LoveCMS の install/index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-1148 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239915 7.5 危険 hbm - hbm の view.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-1147 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239916 4.3 警告 Kayako - Kayako Esupport におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1145 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239917 7.8 危険 jeunes-webmasters - J-Web Pics Navigator の pn-menu.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-1143 2012-09-25 16:47 2007-03-2 Show GitHub Exploit DB Packet Storm
239918 4.3 警告 mtcms - MTCMS の "Contact Us" 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1132 2012-09-25 16:47 2007-02-26 Show GitHub Exploit DB Packet Storm
239919 7.5 危険 mtcms - MTCMS におけるファイルを実行される脆弱性 CWE-Other
その他
CVE-2007-1129 2012-09-25 16:47 2007-02-26 Show GitHub Exploit DB Packet Storm
239920 6.4 警告 Novell - Novell ZENworks 7 Desktop Management Support Pack 1 における特定のフォルダへイメージをアップロードされる脆弱性 - CVE-2007-1119 2012-09-25 16:47 2007-02-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2171 8.8 HIGH
Network
- - A vulnerability was detected in Edimax EW-7438RPn up to 1.31. This affects the function formWizSurvey of the file /goform/formWizSurvey of the component webs. Performing a manipulation of the argumen… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-9345 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2172 8.8 HIGH
Network
- - A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument su… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-9346 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2173 6.3 MEDIUM
Network
- - A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /goform/formWizSurvey of the component webs. The manipulation of the argument ip/mas… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-9347 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2174 8.8 HIGH
Network
- - A vulnerability was found in Edimax EW-7438RPn up to 1.31. Affected by this vulnerability is an unknown functionality of the file /goform/mp of the component webs. The manipulation of the argument we… CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9348 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2175 8.8 HIGH
Network
- - A security flaw has been discovered in Edimax EW-7438RPn 1.28a. Affected by this issue is the function formwlencrypt24g of the file /goform/formwlencrypt24g of the component POST Request Handler. The… CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow
CVE-2026-9360 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2176 6.3 MEDIUM
Network
- - A vulnerability was identified in Edimax EW-7438RPn 1.28a. Affected by this vulnerability is the function formHwSet of the file /goform/formHwSet of the component POST Request Handler. The manipulati… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-9359 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2177 6.3 MEDIUM
Network
- - A weakness has been identified in Edimax EW-7438RPn 1.12. This affects the function formAccept of the file /goform/formAccep of the component POST Request Handler. This manipulation of the argument s… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-9361 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2178 6.3 MEDIUM
Network
- - A security vulnerability has been detected in Edimax EW-7438RPn 1.12. This vulnerability affects the function formConnectionSetting of the file /goform/formConnectionSetting of the component Setting … CWE-74
CWE-77
Injection
Command Injection
CVE-2026-9362 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2179 6.3 MEDIUM
Network
- - A vulnerability was detected in Edimax EW-7438RPn 1.12. This issue affects the function formEZCHNwlanSetup of the file /goform/formEZCHNwlanSetu of the component POST Request Handler. Performing a ma… CWE-74
CWE-77
Injection
Command Injection
CVE-2026-9363 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm
2180 7.3 HIGH
Network
- - A flaw has been found in projectworlds Online Art Gallery Shop 1.0. Impacted is an unknown function of the file /admin/adminHome.php. Executing a manipulation of the argument social_linked can lead t… CWE-74
CWE-89
Injection
SQL Injection
CVE-2026-9364 2026-05-27 04:37 2026-05-24 Show GitHub Exploit DB Packet Storm