Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244931 4.3 警告 Fonality - Fonality Trixbox PBX 製品の registry.pl における任意のコマンド実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-6424 2012-06-26 15:54 2007-12-18 Show GitHub Exploit DB Packet Storm
244932 2.1 注意 Debian - Debian GNU/Linux の libdspam7-drv-mysql cron job におけるパスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2007-6418 2012-06-26 15:54 2007-10-29 Show GitHub Exploit DB Packet Storm
244933 8.5 危険 Debian - scponly における任意のファイルを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6415 2012-06-26 15:54 2007-08-10 Show GitHub Exploit DB Packet Storm
244934 7.5 危険 adultscript - Adult Script の admin/administrator.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2007-6414 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244935 6.8 警告 Bitweaver - Bitweaver の wiki/index.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2007-6412 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244936 4.3 警告 gadu-gadu - Gadu-Gadu の GG Client の HandleEmotsConfig 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6411 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244937 4.3 警告 gadu-gadu - Gadu-Gadu におけるクロスサイトリクエストフォージェリ攻撃の脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6410 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244938 4.3 警告 gadu-gadu - Gadu-Gadu の gg プロトコルハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定 		CVE-2007-6409 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244939 4.3 警告 CA Technologies - CA eTrust Threat Management Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6406 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
244940 6.5 警告 ace image hosting script - Ace Image Hosting Script の albums.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6393 2012-06-26 15:54 2007-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
441 8.7 HIGH
Network 		openwebui open_webui Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the tool_servers and terminal_servers keys in utils/tools.py do use a prefix. When t… Update CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2026-44552 2026-05-19 03:32 2026-05-16 Show GitHub Exploit DB Packet Storm
442 8.3 HIGH
Network 		google chrome Use after free in HID in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted H… Update CWE-416
 Use After Free 		CVE-2026-8515 2026-05-19 03:32 2026-05-15 Show GitHub Exploit DB Packet Storm
443 5.3 MEDIUM
Network 		pyload pyload pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, pyload-ng WebUI returns full Python traceback details to clients on unhandled exceptions. Because /web/<p… Update CWE-209
Information Exposure Through an Error Message 		CVE-2026-44226 2026-05-19 03:25 2026-05-12 Show GitHub Exploit DB Packet Storm
444 6.5 MEDIUM
Network 		guimard apache\ Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default session id generator re… Update CWE-338
CWE-340
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
 Generation of Predictable Numbers or Identifiers 		CVE-2026-8503 2026-05-19 03:23 2026-05-15 Show GitHub Exploit DB Packet Storm
445 5.4 MEDIUM
Network 		google chrome Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Update CWE-451
 User Interface (UI) Misrepresentation of Critical Information 		CVE-2026-8561 2026-05-19 03:22 2026-05-15 Show GitHub Exploit DB Packet Storm
446 4.3 MEDIUM
Network 		google chrome Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Mediu… Update CWE-1300
 Improper Protection of Physical Side Channels 		CVE-2026-8562 2026-05-19 03:21 2026-05-15 Show GitHub Exploit DB Packet Storm
447 9.1 CRITICAL
Network 		- - DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary fi… New CWE-22
Path Traversal 		CVE-2026-45230 2026-05-19 03:17 2026-05-19 Show GitHub Exploit DB Packet Storm
448 10.0 CRITICAL
Network 		- - Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. New CWE-287
Improper Authentication 		CVE-2026-42822 2026-05-19 03:17 2026-05-19 Show GitHub Exploit DB Packet Storm
449 8.8 HIGH
Network 		- - Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges to gain unauthorized administrato… New CWE-269
 Improper Privilege Management 		CVE-2026-41085 2026-05-19 03:17 2026-05-19 Show GitHub Exploit DB Packet Storm
450 6.2 MEDIUM
Local 		- - OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in source/src/enet_encap/cpf.c. A c… New CWE-125
Out-of-bounds Read 		CVE-2026-38719 2026-05-19 03:17 2026-05-19 Show GitHub Exploit DB Packet Storm