Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252901 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3694 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
252902 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3693 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
252903 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3692 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
252904 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおける脆弱性 CWE-noinfo
情報不足 		CVE-2008-3691 2010-09-13 15:58 2008-08-28 Show GitHub Exploit DB Packet Storm
252905 10 危険 VMware - 複数の VMware 製品のデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2008-1392 2010-09-13 15:57 2008-03-20 Show GitHub Exploit DB Packet Storm
252906 10 危険 VMware - 複数の VMware 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-3892 2010-09-13 15:57 2008-09-3 Show GitHub Exploit DB Packet Storm
252907 7.2 危険 VMware - 複数の VMware 製品の VIX API におけるバッファオーバーフローの脆弱性 CWE-119
CWE-noinfo
CVE-2008-2100 2010-09-13 15:56 2008-06-4 Show GitHub Exploit DB Packet Storm
252908 7.8 危険 VMware - 複数の VMware 製品の DHCP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-noinfo
CVE-2008-1364 2010-09-13 15:56 2008-03-17 Show GitHub Exploit DB Packet Storm
252909 6.8 警告 VMware - 複数の VMware 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1363 2010-09-13 15:56 2008-03-17 Show GitHub Exploit DB Packet Storm
252910 7.2 危険 VMware - 複数の VMware 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-1362 2010-09-13 15:55 2008-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2121 5.3 MEDIUM
Network 		- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Themefic Instantio instantio allows Retrieve Embedded Sensitive Data.This issue affects Instantio: from n/a… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-39571 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2122 4.0 MEDIUM
Network 		- - Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Ret… CWE-497
 Exposure of Sensitive System Information to an Unauthorized Control Sphere 		CVE-2026-39572 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2123 6.5 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affe… CWE-79
Cross-site Scripting 		CVE-2026-39575 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2124 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through <= 1.0.16. CWE-862
 Missing Authorization 		CVE-2026-39585 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2125 5.3 MEDIUM
Network 		- - Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a throu… CWE-201
 Insertion of Sensitive Information Into Sent Data 		CVE-2026-39586 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2126 5.3 MEDIUM
Network 		- - Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue … CWE-862
 Missing Authorization 		CVE-2026-39588 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2127 4.3 MEDIUM
Network 		- - Missing Authorization vulnerability in Andy Ha DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n… CWE-862
 Missing Authorization 		CVE-2026-39592 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2128 - - - Missing Authorization vulnerability in Rustaurius Order Tracking order-tracking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Tracking: from n/a thr… CWE-862
 Missing Authorization 		CVE-2026-39602 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2129 5.4 MEDIUM
Network 		- - Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography: from n/a through <= 5.7.8. CWE-352
 Origin Validation Error 		CVE-2026-39603 2026-04-25 03:07 2026-04-8 Show GitHub Exploit DB Packet Storm
2130 5.9 MEDIUM
Network 		- - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookTable Bookstore mybooktable allows Stored XSS.This issue affects MyBookTable Book… CWE-79
Cross-site Scripting 		CVE-2026-39604 2026-04-25 03:06 2026-04-8 Show GitHub Exploit DB Packet Storm