Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242641	7.5	危険	benjacms	-	Benja CMS の admin/upload.php における任意の PHP ファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2008-2988	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242642	4.3	警告	benjacms	-	Benja CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2987	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242643	6.8	警告	cmreams	-	CMReams CMS の load_language.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2985	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242644	4.3	警告	cmreams	-	CMReams CMS の backend/umleitung.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2984	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242645	7.5	危険	cwh underground	-	Demo4 CMS Beta 内の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2983	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242646	7.5	危険	cistyle	-	CiBlog の links-extern.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2971	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242647	5	警告	cmsmini	-	CMS Mini の view/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-2961	2012-06-26 16:02	2008-07-2	Show	GitHub Exploit DB Packet Storm

242648	4.4	警告	checkinstall	-	checkinstall における任意のファイルを上書きされる脆弱性	CWE-362 競合状態	CVE-2008-2958	2012-06-26 16:02	2008-07-1	Show	GitHub Exploit DB Packet Storm

242649	7.5	危険	eztechhelp company	-	EZTechhelp EZCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-2921	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

242650	7.5	危険	ezcms	-	EZTechhelp EZCMS のファイルマネージャにおけるファイル削除される脆弱性	CWE-287 不適切な認証	CVE-2008-2920	2012-06-26 16:02	2008-06-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1131	2.6	LOW Adjacent	-	-	A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the c… New	CWE-362 CWE-367 Race Condition Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2026-7846	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1132	2.6	LOW Adjacent	-	-	A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py … New	CWE-327 CWE-328 Use of a Broken or Risky Cryptographic Algorithm Use of Weak Hash	CVE-2026-7845	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1133	6.3	MEDIUM Adjacent	-	-	A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete_file of the file l… New	CWE-287 CWE-306 Improper Authentication Missing Authentication for Critical Function	CVE-2026-7844	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1134	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling. In 'Elixir.Phoenix.Trans… New	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-32689	2026-05-6 01:16	2026-05-6	Show	GitHub Exploit DB Packet Storm

1135	9.8	CRITICAL Network	-	-	Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file… Update	CWE-122 Heap-based Buffer Overflow	CVE-2025-70067	2026-05-6 01:16	2026-05-4	Show	GitHub Exploit DB Packet Storm

1136	4.9	MEDIUM Network	sonicwall	sonicos	A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. Update	CWE-121 Stack-based Buffer Overflow	CVE-2026-0206	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

1137	6.8	MEDIUM Adjacent	sonicwall	sonicos	A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. Update	CWE-35 Path Traversal: '.../...//'	CVE-2026-0205	2026-05-6 01:12	2026-04-30	Show	GitHub Exploit DB Packet Storm

1138	8.0	HIGH Adjacent	sonicwall	sonicos	A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. Update	CWE-306 CWE-1390 Missing Authentication for Critical Function Weak Authentication	CVE-2026-0204	2026-05-6 01:11	2026-04-30	Show	GitHub Exploit DB Packet Storm

1139	5.5	MEDIUM Local	wireshark	wireshark	IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.4 Update	CWE-476 NULL Pointer Dereference	CVE-2026-6525	2026-05-6 00:42	2026-05-2	Show	GitHub Exploit DB Packet Storm

1140	7.8	HIGH Local	entechtaiwan	tvicport	An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x80002008 requests.	CWE-20 CWE-269 Improper Input Validation Improper Privilege Management	CVE-2026-30769	2026-05-5 23:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed