Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251461 6 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1235 2012-02-23 11:47 2012-02-21 Show GitHub Exploit DB Packet Storm
251462 6.5 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1234 2012-02-23 11:46 2012-02-21 Show GitHub Exploit DB Packet Storm
251463 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0244 2012-02-23 11:41 2012-02-21 Show GitHub Exploit DB Packet Storm
251464 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0243 2012-02-23 11:40 2012-02-21 Show GitHub Exploit DB Packet Storm
251465 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2012-0242 2012-02-23 11:37 2012-02-21 Show GitHub Exploit DB Packet Storm
251466 5 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0241 2012-02-23 11:36 2012-02-21 Show GitHub Exploit DB Packet Storm
251467 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の GbScriptAddUp.asp における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2012-0240 2012-02-23 11:33 2012-02-21 Show GitHub Exploit DB Packet Storm
251468 5 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2012-0239 2012-02-23 11:32 2012-02-21 Show GitHub Exploit DB Packet Storm
251469 7.5 危険 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0238 2012-02-23 11:29 2012-02-21 Show GitHub Exploit DB Packet Storm
251470 6.4 警告 Broadwin
アドバンテック株式会社		 - Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性 CWE-119
バッファエラー 		CVE-2012-0237 2012-02-23 11:27 2012-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4281 7.5 HIGH
Network 		- - An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field. CWE-241
 Improper Handling of Unexpected Data Type 		CVE-2025-63548 2026-05-6 04:39 2026-05-2 Show GitHub Exploit DB Packet Storm
4282 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion when WebSocket permessage-deflate compressio… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-39804 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
4283 - - - Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers. 'Elixir.Bandit.Headers':get_content_length/1 in lib/b… CWE-444
HTTP Request Smuggling 		CVE-2026-39805 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
4284 - - - Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections. 'Elixir.Bandit.Pipeline':determine_… CWE-807
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-39807 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
4285 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. The fragment reassembly path in 'Elixir.Ba… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42786 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
4286 - - - Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated memory exhaustion via oversized HTTP/2 frames. 'Elixir.Bandit.HTTP2.Frame':deserialize/2 i… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-42788 2026-05-6 04:37 2026-05-2 Show GitHub Exploit DB Packet Storm
4287 - - - 3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to execute arbitrary shell commands in the context of the root user by providing paylo… CWE-78
OS Command  		CVE-2025-13605 2026-05-6 04:35 2026-05-5 Show GitHub Exploit DB Packet Storm
4288 9.8 CRITICAL
Network 		- - Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Company Online Support Application allo… CWE-79
Cross-site Scripting 		CVE-2025-14320 2026-05-6 04:34 2026-05-4 Show GitHub Exploit DB Packet Storm
4289 7.2 HIGH
Network 		- - Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue aff… CWE-94
Code Injection 		CVE-2026-3120 2026-05-6 04:34 2026-05-4 Show GitHub Exploit DB Packet Storm
4290 9.8 CRITICAL
Network 		- - D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks… CWE-798
 Use of Hard-coded Credentials 		CVE-2026-42376 2026-05-6 04:32 2026-05-5 Show GitHub Exploit DB Packet Storm