Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242611	6.8	警告	fuzzylime	-	fuzzylime (cms) の rss.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3165	2012-06-26 16:02	2008-07-14	Show	GitHub Exploit DB Packet Storm

242612	7.6	危険	fuzzylime	-	fuzzylime (cms) の blog.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3164	2012-06-26 16:02	2008-07-14	Show	GitHub Exploit DB Packet Storm

242613	9.3	危険	FFmpeg	-	FFmpeg の str_read_packet 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-3162	2012-06-26 16:02	2008-07-14	Show	GitHub Exploit DB Packet Storm

242614	7.8	危険	F5 Networks	-	F5 FirePass 1200 の SNMP デーモンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-22 パス・トラバーサル	CVE-2008-3149	2012-06-26 16:02	2008-07-11	Show	GitHub Exploit DB Packet Storm

242615	7.5	危険	ashopsoftware	-	AShop Deluxe の catalogue.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3136	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

242616	5	警告	GraphicsMagick	-	GraphicsMagick におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-3134	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

242617	6.8	警告	barenuked	-	BareNuked CMS の admin/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3133	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

242618	7.5	危険	catviz	-	Catviz の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3129	2012-06-26 16:02	2008-07-10	Show	GitHub Exploit DB Packet Storm

242619	7.5	危険	dreamlevels	-	DreamNews Manager の dreamnews-rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-3189	2012-06-26 16:02	2008-07-16	Show	GitHub Exploit DB Packet Storm

242620	4.3	警告	Chipmunk Scripts	-	Blogger におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-3186	2012-06-26 16:02	2008-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1131	2.6	LOW Adjacent	-	-	A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the c… New	CWE-362 CWE-367 Race Condition Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-7846	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1132	2.6	LOW Adjacent	-	-	A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py … New	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-7845	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1133	6.3	MEDIUM Adjacent	-	-	A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete_file of the file l… New	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-7844	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1134	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Trans… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-32689	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1135	9.8	CRITICAL Network	-	-	Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file… Update	CWE-122 Heap-based Buffer Overflow	CVE-2025-70067	2026-05-6 01:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

1136	4.9	MEDIUM Network	sonicwall	sonicos	A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-0206	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

1137	6.8	MEDIUM Adjacent	sonicwall	sonicos	A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. Update	CWE-35 Path Traversal: '.../...//'	CVE-2026-0205	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

1138	8.0	HIGH Adjacent	sonicwall	sonicos	A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. Update	CWE-306 CWE-1390 Missing Authentication for Critical Function Weak Authentication	CVE-2026-0204	2026-05-6 01:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

1139	5.5	MEDIUM Local	wireshark	wireshark	IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 Update	CWE-476 NULL Pointer Dereference	CVE-2026-6525	2026-05-6 00:42	2026-05-2	Show	GitHub Exploit DB Packet Storm

1140	7.8	HIGH Local	entechtaiwan	tvicport	An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.	CWE-20 CWE-269 Improper Input Validation Improper Privilege Management	CVE-2026-30769	2026-05-5 23:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed