Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242711 7.5 危険 gouae - GOUAE DWD Realty の admin/index2.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6163 2012-06-26 15:54 2007-11-28 Show GitHub Exploit DB Packet Storm
242712 4.3 警告 BASE - Base Analysis の base_qry_main.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6156 2012-06-26 15:54 2007-11-28 Show GitHub Exploit DB Packet Storm
242713 2.1 注意 FreeBSD - FreeBSD の random などにおける事前にアクセスされたランダムな値の一部を取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-6150 2012-06-26 15:54 2007-11-29 Show GitHub Exploit DB Packet Storm
242714 7.5 危険 dora emlak - Dora Emlak における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6140 2012-06-26 15:54 2007-11-27 Show GitHub Exploit DB Packet Storm
242715 5.8 警告 devmass - DevMass Shopping Cart の admin/kfm/initialise.php における PHP リモートファイルインクルージョンの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6133 2012-06-26 15:54 2007-11-27 Show GitHub Exploit DB Packet Storm
242716 5 警告 GNU Project - gnump3d におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-6130 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
242717 5.8 警告 amber script - Amber Script の scripts/include/show_content.php におけるディレクトリトラバーサルの脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6129 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
242718 7.5 危険 flor de utopia - WorkingOnWeb の events.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6128 2012-06-26 15:54 2007-11-26 Show GitHub Exploit DB Packet Storm
242719 7.5 危険 AlstraSoft - AlstraSoft E-Friends の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6106 2012-06-26 15:54 2007-11-23 Show GitHub Exploit DB Packet Storm
242720 4 警告 Code Crafters Software Limited. - Ability Mail Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-6101 2012-06-26 15:54 2007-11-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
611 9.8 CRITICAL
Network 		- - Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints. This vulnerability allows an attacker to run system commands on the underlyin… CWE-94
Code Injection 		CVE-2026-38992 2026-05-1 01:16 2026-04-30 Show GitHub Exploit DB Packet Storm
612 7.5 HIGH
Network 		- - U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint. This allows an attacker on the local network to perform unlimited authentication… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2026-36959 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
613 7.5 HIGH
Network 		- - A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management in… CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36958 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
614 7.5 HIGH
Network 		- - Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent … CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-36957 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
615 8.8 HIGH
Network 		- - A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanism… CWE-352
 Origin Validation Error 		CVE-2026-36956 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
616 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34998 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
617 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34997 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
618 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34996 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
619 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34995 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm
620 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2026-34994 2026-05-1 01:16 2026-05-1 Show GitHub Exploit DB Packet Storm