Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240161 6.8 警告 mkportal - MKPortal の admin.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0191 2012-09-25 15:36 2007-01-12 Show GitHub Exploit DB Packet Storm
240162 7.5 危険 PHP Web Scripts - Easy Banner Pro の info.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-0178 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
240163 5.1 警告 MediaWiki - MediaWiki の AJAX モジュールにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0177 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
240164 6.8 警告 l2j - L2J Statistik Script の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-0173 2012-09-25 15:36 2007-01-10 Show GitHub Exploit DB Packet Storm
240165 7.5 危険 locazo - LocazoList の main.asp における SQL インジェクションの脆弱性 - CVE-2007-0129 2012-09-25 15:36 2007-01-9 Show GitHub Exploit DB Packet Storm
240166 9.3 危険 Opera Software ASA - Opera の Javascript SVG サポートにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-0127 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
240167 9.3 危険 Opera Software ASA - Opera におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-0126 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
240168 5 警告 カスペルスキー - Kaspersky Lab Antivurus Engine におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-0125 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
240169 6.8 警告 michael romedahl - RI Blog の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-0121 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
240170 6.8 警告 packeteer - Packeteer PacketShaper PacketWise におけるバッファオーバーフローの脆弱性 - CVE-2007-0113 2012-09-25 15:36 2007-01-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1291 7.5 HIGH
Network 		- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. CWE-749
 Exposed Dangerous Method or Function 		CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1292 8.6 HIGH
Network 		- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. CWE-89
SQL Injection 		CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1293 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66592 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1294 6.1 MEDIUM
Local 		- - An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content during installation. CWE-346
 Origin Validation Error 		CVE-2025-66593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1295 6.2 MEDIUM
Local 		- - A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive informatio… CWE-598
Information Exposure Through Query Strings in GET Request  		CVE-2026-2237 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1296 8.0 HIGH
Adjacent 		- - A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2026-3012 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1297 4.2 MEDIUM
Network 		- - A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote at… CWE-1288
 Improper Validation of Consistency within Input 		CVE-2026-9689 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1298 7.1 HIGH
Network 		- - A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem wri… CWE-284
Improper Access Control 		CVE-2026-1933 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1299 6.8 MEDIUM
Network 		- - A flaw was found in Keycloak. An authenticated user with low privileges can exploit this vulnerability by sending an oversized subject_token JSON Web Token (JWT) to the TokenEndpoint. When the token … CWE-1284
 Improper Validation of Specified Quantity in Input 		CVE-2026-9704 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
1300 6.8 MEDIUM
Network 		- - PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-an… CWE-89
SQL Injection 		CVE-2026-9617 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm