Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246101 5 警告 cor entertainment - Alien Arena 2007 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4755 2012-06-26 15:54 2007-09-7 Show GitHub Exploit DB Packet Storm
246102 7.5 危険 cor entertainment - Alien Arena 2007 の acesrc/acebot_cmds.c の safe_bprintf 関数におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2007-4754 2012-06-26 15:54 2007-09-7 Show GitHub Exploit DB Packet Storm
246103 1.9 注意 data-vision - RemoteDocs R-Viewer における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2007-4751 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
246104 9.3 危険 data-vision - RemoteDocs R-Viewer における任意のコードを実行される脆弱性 CWE-310
暗号の問題 		CVE-2007-4750 2012-06-26 15:54 2007-09-18 Show GitHub Exploit DB Packet Storm
246105 6.8 警告 オートデスク株式会社 - Autodesk Backburner の cmdjob ユーティリティにおけるレンダリングサーバ上で任意のコマンドを実行される脆弱性 CWE-16
環境設定 		CVE-2007-4749 2012-06-26 15:54 2007-09-13 Show GitHub Exploit DB Packet Storm
246106 10 危険 シスコシステムズ - Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone および Module) ファームウェアなどにおける管理者操作を実行される脆弱性 CWE-287
不適切な認証 		CVE-2007-4747 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
246107 9 危険 シスコシステムズ - Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone および Module) ファームウェアなどにおける管理者操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-4746 2012-06-26 15:54 2007-09-5 Show GitHub Exploit DB Packet Storm
246108 6.8 警告 anyinventory - AnyInventory の environment.php における任意の PHP コードが実行される脆弱性 CWE-20
CWE-94
CVE-2007-4744 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
246109 4.3 警告 Claroline Consortium - Claroline における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2007-4742 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
246110 3.5 注意 Claroline Consortium - Claroline の admin/adminusers.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-4741 2012-06-26 15:54 2007-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
411 8.8 HIGH
Network 		- - A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipul… New CWE-119
CWE-120
Incorrect Access of Indexable Resource ('Range Error') 
Classic Buffer Overflow 		CVE-2026-9442 2026-05-25 19:16 2026-05-25 Show GitHub Exploit DB Packet Storm
412 6.3 MEDIUM
Network 		- - A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. Performing … New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9441 2026-05-25 19:16 2026-05-25 Show GitHub Exploit DB Packet Storm
413 - - - This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing… New CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2026-9274 2026-05-25 19:16 2026-05-25 Show GitHub Exploit DB Packet Storm
414 - - - Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The… New CWE-61
 UNIX Symbolic Link (Symlink) Following 		CVE-2026-5223 2026-05-25 19:16 2026-05-25 Show GitHub Exploit DB Packet Storm
415 - - - Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary na… New CWE-647
 Use of Non-Canonical URL Paths for Authorization Decisions 		CVE-2026-5222 2026-05-25 19:16 2026-05-25 Show GitHub Exploit DB Packet Storm
416 - - - A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user t… New CWE-269
 Improper Privilege Management 		CVE-2026-9490 2026-05-25 17:16 2026-05-25 Show GitHub Exploit DB Packet Storm
417 6.3 MEDIUM
Network 		- - A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulat… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9440 2026-05-25 17:16 2026-05-25 Show GitHub Exploit DB Packet Storm
418 6.3 MEDIUM
Network 		- - A vulnerability was determined in Edimax BR-6675nD 1.12. Affected is the function stainfo of the file /goform/stainfo. This manipulation of the argument interface causes command injection. It is poss… New CWE-74
CWE-77
Injection
Command Injection 		CVE-2026-9439 2026-05-25 17:16 2026-05-25 Show GitHub Exploit DB Packet Storm
419 5.4 MEDIUM
Network 		- - A vulnerability was found in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file courseDel.php. The manipulation of the arg… New CWE-99
Resource Injection 		CVE-2026-9438 2026-05-25 17:16 2026-05-25 Show GitHub Exploit DB Packet Storm
420 6.3 MEDIUM
Network 		- - A vulnerability has been found in DTStack Taier 1.4.0. This affects the function Runtime.exec of the component REST API. The manipulation of the argument sqlText leads to os command injection. The at… New CWE-77
CWE-78
Command Injection
OS Command  		CVE-2026-9437 2026-05-25 17:16 2026-05-25 Show GitHub Exploit DB Packet Storm