Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
245421 6.8 警告 アップル - Apple Safari における重要なメモリコンテンツを取得される脆弱性 CWE-DesignError
CVE-2008-0894 2012-06-26 15:55 2008-02-21 Show GitHub Exploit DB Packet Storm
245422 7.5 危険 BEAシステムズ - BEA WebLogic Portal Maintenance Pack 2 におけるセッションを傍受される脆弱性 CWE-59
リンク解釈の問題
CVE-2008-0870 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245423 4.3 警告 BEAシステムズ - BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0869 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245424 4.3 警告 BEAシステムズ - BEA WebLogic Portal Maintenance Pack 1 の Groupspace におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0868 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245425 4.3 警告 bea systems - BEA AquaLogic Interaction MP1 の portal/server.pt におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0867 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245426 4.3 警告 BEAシステムズ - BEA WebLogic Workshop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0866 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245427 5 警告 BEAシステムズ - BEA WebLogic Portal における浮動可能な WLP ポートレットのインスタンスに対して資格を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0865 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245428 5 警告 BEAシステムズ - BEA WebLogic Portal の Admin Tools におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-0864 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245429 7.5 危険 e-vision - e-Vision CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-0856 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
245430 5 警告 freeSSHd - freeSSHd におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-0852 2012-06-26 15:55 2008-02-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
391 8.4 HIGH
Local
- - AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured ex… New CWE-121
Stack-based Buffer Overflow
CVE-2018-25360 2026-05-26 00:16 2026-05-26 Show GitHub Exploit DB Packet Storm
392 8.4 HIGH
Local
- - Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable files. Attackers can … New CWE-276
Incorrect Default Permissions 
CVE-2018-25359 2026-05-26 00:16 2026-05-26 Show GitHub Exploit DB Packet Storm
393 8.8 HIGH
Network
- - A security vulnerability has been detected in Edimax EW-7438RPn 1.31. Affected is the function formRadius of the file /goform/formRadius. The manipulation of the argument submit-url leads to stack-ba… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9461 2026-05-25 23:16 2026-05-25 Show GitHub Exploit DB Packet Storm
394 8.8 HIGH
Network
- - A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-ba… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9460 2026-05-25 23:16 2026-05-25 Show GitHub Exploit DB Packet Storm
395 8.8 HIGH
Network
- - A security flaw has been discovered in Edimax EW-7438RPn 1.31. This affects the function formConnectionSetting of the file /goform/formConnectionSetting. Performing a manipulation of the argument max… New CWE-119
CWE-121
Incorrect Access of Indexable Resource ('Range Error') 
Stack-based Buffer Overflow
CVE-2026-9459 2026-05-25 23:16 2026-05-25 Show GitHub Exploit DB Packet Storm
396 - - - Szafir SDK returns a success status code from the cryptographic digital signature verification process (i.e. /VerifyingTaskItem/Signature/VerificationResult/Result/@code == 0, "Positively verified") … New CWE-393
CWE-637
 Return of Wrong Status Code
CVE-2026-9058 2026-05-25 23:16 2026-05-25 Show GitHub Exploit DB Packet Storm
397 7.3 HIGH
Network
- - A vulnerability was detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. This affects the function which of the file /src/application/skills-loader.ts of the component Ski… New CWE-74
CWE-77
Injection
Command Injection
CVE-2026-9453 2026-05-25 22:16 2026-05-25 Show GitHub Exploit DB Packet Storm
398 - - - Kenik Camera management Panel is vulnerable to Path Traversal vulnerability. An unauthenticated attacker can send GET request with arbitrary file path and read corresponding files located on the serv… New CWE-22
Path Traversal
CVE-2026-7766 2026-05-25 22:16 2026-05-25 Show GitHub Exploit DB Packet Storm
399 - - - Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache… New CWE-90
LDAP Injection
CVE-2026-46745 2026-05-25 22:16 2026-05-25 Show GitHub Exploit DB Packet Storm
400 7.3 HIGH
Network
- - A security vulnerability has been detected in FoundDream miniclawd up to 2d65665046e2222eeea76cafc8570ed546a8c125. Affected by this issue is the function ExecTool.execute of the file /src/tools/exec.… New CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-9452 2026-05-25 20:16 2026-05-25 Show GitHub Exploit DB Packet Storm