Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246721 5 警告 devellion - Devellion CubeCart における HTTP レスポンス分割攻撃を誘発する脆弱性 - CVE-2007-2550 2012-06-26 15:46 2007-05-9 Show GitHub Exploit DB Packet Storm
246722 7.5 危険 berylium - Berylium2 の berylium-classes.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2531 2012-06-26 15:46 2007-05-8 Show GitHub Exploit DB Packet Storm
246723 7.5 危険 dynamicpad - DynamicPAD における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-2527 2012-06-26 15:46 2007-05-8 Show GitHub Exploit DB Packet Storm
246724 7.2 危険 CA Technologies - CA Anti-Virus for the Enterprise および Threat Manager における共有ファイルマッピングを変更される脆弱性 - CVE-2007-2523 2012-06-26 15:46 2007-05-11 Show GitHub Exploit DB Packet Storm
246725 10 危険 CA Technologies - 複数の CA 製品の inoWeb Console Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-2522 2012-06-26 15:46 2007-04-24 Show GitHub Exploit DB Packet Storm
246726 7.5 危険 e-gads - E-GADS! の common.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-2521 2012-06-26 15:46 2007-05-8 Show GitHub Exploit DB Packet Storm
246727 6.8 警告 frankmancuso - MyNews の admin.php における SQL インジェクションの脆弱性 - CVE-2007-2520 2012-06-26 15:46 2007-06-26 Show GitHub Exploit DB Packet Storm
246728 9.3 危険 シマンテック
numara
centennial		 - XferWan.exe におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2514 2012-06-26 15:46 2007-06-6 Show GitHub Exploit DB Packet Storm
246729 7.5 危険 Alcatel-Lucent - OmniPCX Enterprise の Alcatel-Lucent IP-Touch Telephone におけるボイス VLAN へアクセスを取得される脆弱性 - CVE-2007-2512 2012-06-26 15:46 2007-06-7 Show GitHub Exploit DB Packet Storm
246730 7.5 危険 fernando m.a.d.s. - CodePress の codepress.html における任意のコードを実行される脆弱性 - CVE-2007-2501 2012-06-26 15:46 2007-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
1241 5.5 MEDIUM
Local 		- - BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.38 and prior, the build packaging workflow follows attacker-controlled symli… New CWE-59
Link Following 		CVE-2026-40610 2026-05-27 01:16 2026-05-23 Show GitHub Exploit DB Packet Storm
1242 7.8 HIGH
Local 		- - gix-submodule before 0.82.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized … New CWE-77
Command Injection 		CVE-2026-40034 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1243 - - - An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l… New - CVE-2026-38587 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1244 7.0 HIGH
Local 		samba rsync Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac… Update CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2026-29518 2026-05-27 01:16 2026-05-20 Show GitHub Exploit DB Packet Storm
1245 7.8 HIGH
Local 		- - A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack. New CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2026-25112 2026-05-27 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1246 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from… New CWE-787
 Out-of-bounds Write 		CVE-2026-46300 2026-05-27 00:46 2026-05-23 Show GitHub Exploit DB Packet Storm
1247 7.3 HIGH
Network 		- - A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Valu… New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9552 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
1248 7.3 HIGH
Network 		- - A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The … New CWE-74
CWE-89
Injection
SQL Injection 		CVE-2026-9551 2026-05-27 00:17 2026-05-27 Show GitHub Exploit DB Packet Storm
1249 7.3 HIGH
Network 		- - A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the file /SubstationWE… New CWE-22
Path Traversal 		CVE-2026-9550 2026-05-27 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm
1250 8.5 HIGH
Network 		- - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution charac… New CWE-78
OS Command  		CVE-2026-4480 2026-05-27 00:16 2026-05-27 Show GitHub Exploit DB Packet Storm