Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244451 7.5 危険 ActivePDF, Inc. - activePDF Server の activePDF Server サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5397 2012-06-26 15:54 2008-02-28 Show GitHub Exploit DB Packet Storm
244452 6.8 警告 cplinks - cpDynaLinks の category.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5408 2012-06-26 15:54 2007-10-12 Show GitHub Exploit DB Packet Storm
244453 10 危険 AbiWord
link grammar
- AbiWord Link Grammar で使用される Link Grammar の separate_word 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5395 2012-06-26 15:54 2007-11-7 Show GitHub Exploit DB Packet Storm
244454 4.3 警告 日本アルカテル・ルーセント
bt
- BT Home Hub などで使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-5385 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244455 4.3 警告 日本アルカテル・ルーセント
bt
- BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2007-5384 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244456 10 危険 日本アルカテル・ルーセント
bt
- BT Home Hub で使用される Thomson/Alcatel SpeedTouch 7G ルータにおける管理者アクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2007-5383 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
244457 10 危険 シスコシステムズ - CiscoWorks WLSE を変換する変換ユーティリティにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2007-5382 2012-06-26 15:54 2007-10-10 Show GitHub Exploit DB Packet Storm
244458 6.9 警告 GNU Project - Emacs の Tramp 拡張における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2007-5377 2012-06-26 15:54 2007-10-4 Show GitHub Exploit DB Packet Storm
244459 10 危険 LedgerSMB
dws systems inc.
- LedgerSMB における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2007-5372 2012-06-26 15:54 2007-09-28 Show GitHub Exploit DB Packet Storm
244460 5 警告 富士通 - 複数の Fujitsu Interstage 製品における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5366 2012-06-26 15:54 2007-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
591 8.2 HIGH
Network
- - exiftool-vendored provides cross-platform Node.js access to ExifTool. Prior to 35.19.0, exiftool-vendored starts ExifTool in -stay_open True -@ - mode, where arguments are read from stdin one per lin… New CWE-88
Argument Injection
CVE-2026-43893 2026-05-14 03:27 2026-05-12 Show GitHub Exploit DB Packet Storm
592 - - - pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes. Prior to 0.2.0-alpha, a heap buffer over-read in peer_lookup_tcp (src/peer_lookup.c:… New CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound)
CVE-2026-43916 2026-05-14 03:27 2026-05-12 Show GitHub Exploit DB Packet Storm
593 9.1 CRITICAL
Network
- - sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot. In sealed-env enterprise mode, versions 0.1.0-alpha.1 through 0.1.0-alpha.3 embedded the operator's… New CWE-200
CWE-522
Information Exposure
 Insufficiently Protected Credentials
CVE-2026-45091 2026-05-14 03:27 2026-05-12 Show GitHub Exploit DB Packet Storm
594 8.2 HIGH
Network
- - Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval. Prior to 2.1.7, isPublicHttpUrl / assertPublicHttpUrl in src/utils/urlSafety.ts do not r… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42260 2026-05-14 03:27 2026-05-13 Show GitHub Exploit DB Packet Storm
595 - - - MinIO is a high-performance object storage system. From RELEASE.2022-07-24T01-54-52Z to before RELEASE.2026-04-14T21-32-45Z, A path traversal vulnerability in MinIO's ReadMultiple internode storage-R… New CWE-22
Path Traversal
CVE-2026-42600 2026-05-14 03:26 2026-05-12 Show GitHub Exploit DB Packet Storm
596 5.8 MEDIUM
Network
- - Outline is a service that allows for collaborative documentation. Prior to 1.7.1, the Slack integration callback for GET /auth/slack.post accepts an unsigned, session-independent OAuth state value. A… New CWE-352
 Origin Validation Error
CVE-2026-44695 2026-05-14 03:26 2026-05-12 Show GitHub Exploit DB Packet Storm
597 - - - Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in Go Fiber allows a remote attacker to inject arbitrary HTML/JavaScript by supplying Accept: text/html… New CWE-79
Cross-site Scripting
CVE-2026-42554 2026-05-14 03:26 2026-05-12 Show GitHub Exploit DB Packet Storm
598 - - - Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.76 and 9.9.0-alpha.2, a race condition in the MFA SMS one-time password (OTP) logi… New CWE-362
Race Condition
CVE-2026-43930 2026-05-14 03:26 2026-05-12 Show GitHub Exploit DB Packet Storm
599 8.8 HIGH
Network
- - YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5, Any admin OnPost… handler executes its side effects before the ResultFilterAttribute rewrites the response to a 302 to /Info/4. Th… New CWE-89
CWE-841
SQL Injection
 Improper Enforcement of Behavioral Workflow
CVE-2026-43937 2026-05-14 03:24 2026-05-13 Show GitHub Exploit DB Packet Storm
600 8.1 HIGH
Network
- - YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum. Prior to 4.0.5 and 3.2.12, the application's database logger (YAFNET.Core/Logger/DbLogger.cs) captures the incoming request's User-Agent header in… New CWE-79
CWE-80
CWE-116
Cross-site Scripting
Basic XSS
 Improper Encoding or Escaping of Output
CVE-2026-43938 2026-05-14 03:24 2026-05-13 Show GitHub Exploit DB Packet Storm