Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244801 10 危険 CA Technologies - CA BrightStor ARCserve Backup for Laptops and Desktops のコマンドハンドラにおけるユーザを追加および削除される脆弱性 CWE-287
不適切な認証
CVE-2007-5006 2012-06-26 15:54 2007-09-20 Show GitHub Exploit DB Packet Storm
244802 10 危険 CA Technologies - CA BrightStor ARCserve Backup for Laptops and Desktops の rxRPC.dll におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-5005 2012-06-26 15:54 2007-09-20 Show GitHub Exploit DB Packet Storm
244803 9.3 危険 CA Technologies - CA BrightStor ARCserve Backup for Laptops and Desktops における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2007-5004 2012-06-26 15:54 2007-09-20 Show GitHub Exploit DB Packet Storm
244804 10 危険 CA Technologies - CA BrightStor ARCserve Backup for Laptops and Desktops におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-5003 2012-06-26 15:54 2007-09-20 Show GitHub Exploit DB Packet Storm
244805 10 危険 Firebird Project - Firebird SQL の fbserver.exe の process_packet 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4992 2012-06-26 15:54 2007-10-10 Show GitHub Exploit DB Packet Storm
244806 10 危険 JetAudio - jetAudio の JetFlExt.dll の JetAudio.Interface.1 ActiveX コントロールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4983 2012-06-26 15:54 2007-09-19 Show GitHub Exploit DB Packet Storm
244807 4.3 警告 gcaldaemon - GCALDaemon の readRequest メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2007-4980 2012-06-26 15:54 2007-09-19 Show GitHub Exploit DB Packet Storm
244808 3.5 注意 Coppermine Photo Gallery - CPG の mode.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4977 2012-06-26 15:54 2007-09-19 Show GitHub Exploit DB Packet Storm
244809 6.5 警告 Coppermine Photo Gallery - CPG の viewlog.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2007-4976 2012-06-26 15:54 2007-09-19 Show GitHub Exploit DB Packet Storm
244810 4.3 警告 b1g - b1gMail の hilfe.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-4975 2012-06-26 15:54 2007-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351 9.4 CRITICAL
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, the default deny-lists used by Gotenberg's downloadFrom feature and webhook feature are bypassable. Because the filter is r… New CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-42596 2026-05-16 02:16 2026-05-15 Show GitHub Exploit DB Packet Storm
352 8.2 HIGH
Network
- - Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.30.0, The ExifTool metadata write blocklist in Gotenberg can be bypassed using ExifTool's group-prefix syntax, enabling arbitrary… New CWE-184
 Incomplete Blacklist
CVE-2026-42590 2026-05-16 02:16 2026-05-15 Show GitHub Exploit DB Packet Storm
353 9.1 CRITICAL
Network
- - OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before 2.7.9 and 2.8.6, the ConceptReferenceRangeUtility.evaluateCriteria() method in OpenMRS Core evaluates databas… New CWE-94
Code Injection
CVE-2026-41258 2026-05-16 02:16 2026-05-16 Show GitHub Exploit DB Packet Storm
354 - - - Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.44, 3.6.15, and 3.7.0-rc.3, there is an information disclosure vulnerability in Traefik's errors (custom error pages) middleware. Whe… New CWE-201
 Insertion of Sensitive Information Into Sent Data
CVE-2026-41181 2026-05-16 02:16 2026-05-16 Show GitHub Exploit DB Packet Storm
355 5.4 MEDIUM
Network
- - Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, where the template string is proce… New CWE-79
Cross-site Scripting
CVE-2026-23695 2026-05-16 02:16 2026-05-16 Show GitHub Exploit DB Packet Storm
356 6.5 MEDIUM
Network
shellhub shellhub ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated u… New CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2026-44423 2026-05-16 02:16 2026-05-14 Show GitHub Exploit DB Packet Storm
357 7.5 HIGH
Network
zitadel zitadel ZITADEL is an open source identity management platform. From 2.71.11 to before 3.4.10 and 4.15.0, a vulnerability was discovered in Zitadel's LDAP identity provider implementation, which fails to pro… New CWE-90
LDAP Injection
CVE-2026-44671 2026-05-16 02:15 2026-05-15 Show GitHub Exploit DB Packet Storm
358 6.5 MEDIUM
Network
frappe erpnext ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.102.0 and 16.11.0, certain endpoints failed to enforce proper authorization checks, allowing users to modify data beyo… New CWE-862
 Missing Authorization
CVE-2026-44448 2026-05-16 01:20 2026-05-14 Show GitHub Exploit DB Packet Storm
359 9.1 CRITICAL
Network
opnsense opnsense OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized user input is passed to the DHCP configuration of the configured interface, which is processed by a shell scrip… New CWE-88
Argument Injection
CVE-2026-45158 2026-05-16 01:19 2026-05-14 Show GitHub Exploit DB Packet Storm
360 4.3 MEDIUM
Network
- - Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium sec… New CWE-284
Improper Access Control
CVE-2026-8566 2026-05-16 01:16 2026-05-15 Show GitHub Exploit DB Packet Storm