Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1731 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月21日） - - 2026-04-23 17:41 2026-04-22 Show GitHub Exploit DB Packet Storm
1732 8.8 重要
Network 		サイレックス・テクノロジー株式会社 SD-330AC
AMC Manager 		サイレックス・テクノロジー製SD-330ACおよびAMC Managerにおける複数の脆弱性 CWE-1188
CWE-121
CWE-122
CWE-1395
CWE-226
CWE-266
CWE-306
CWE-321
CWE-327
CWE-79
CWE-93
CVE-2015-5621
CVE-2024-24487
CVE-2026-32955
CVE-2026-32956
CVE-2026-32957
CVE-2026-32958
CVE-2026-32959
CVE-2026-32960
CVE-2026-32961
CVE-2026-32962
CVE-2026-32963
CV… 		2026-04-23 17:36 2026-04-20 Show GitHub Exploit DB Packet Storm
1733 7.5 重要
Network 		株式会社GROWI GROWI GROWIにおける、正規表現を用いたサービス運用妨害（ReDoS）の脆弱性 CWE-Other
その他 		CVE-2026-41040 2026-04-23 15:16 2026-04-23 Show GitHub Exploit DB Packet Storm
1734 8.8 重要
Network 		一般社団法人 JPCERT コーディネーションセンター LogonTracer LogonTracerにおける複数の脆弱性 CWE-78
CWE-Other
CVE-2026-33277
CVE-2026-33566 		2026-04-23 14:12 2026-04-23 Show GitHub Exploit DB Packet Storm
1735 7.3 重要
Local 		i-PRO株式会社 IP簡単設定ソフトウェア i-PRO製IP簡単設定ソフトウェアにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-34488 2026-04-23 12:21 2026-04-23 Show GitHub Exploit DB Packet Storm
1736 4.7 警告
Network 		彼方株式会社 CMS ALAYA CMS ALAYAにおけるSQLインジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40529 2026-04-23 12:07 2026-04-23 Show GitHub Exploit DB Packet Storm
1737 10 緊急
Network 		Quest Software Inc. KACE Systems Management Appliance Quest Software Inc.のKACE Systems Management Applianceにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-32975 2026-04-23 10:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1738 7.5 重要
Network 		jsonparser project jsonparser jsonparser projectのjsonparserにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-32285 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
1739 7.5 重要
Network 		antchfx Xpath antchfxのXpathにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-32287 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
1740 5.5 警告
Local 		Direct-Soft Inc. WinMPG Video Convert Direct-Soft Inc.のWinMPG Video Convertにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25644 2026-04-23 10:17 2026-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347811 - ibm websphere_application_server Unknown vulnerability in IBM Websphere Application Server 5.0, 5.1, and 6.0 when running on Windows, allows remote attackers to obtain the source code for Java Server Pages (.jsp) via a crafted URL t… NVD-CWE-Other
CVE-2005-0425 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347812 - bea weblogic_server BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier fo… NVD-CWE-Other
CVE-2005-0432 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347813 - awstats awstats Directory traversal vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to include arbitrary Perl modules via .. (dot dot) sequences in the loadplugin parameter. NVD-CWE-Other
CVE-2005-0437 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347814 - vmware workstation VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code. NVD-CWE-Other
CVE-2005-0444 2008-09-6 05:46 2005-02-14 Show GitHub Exploit DB Packet Storm
347815 - sami sami_http_server Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences. NVD-CWE-Other
CVE-2005-0450 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347816 - sami sami_http_server Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference. NVD-CWE-Other
CVE-2005-0451 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347817 - lighttpd lighttpd The buffer_urldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL … NVD-CWE-Other
CVE-2005-0453 2008-09-6 05:46 2005-02-16 Show GitHub Exploit DB Packet Storm
347818 - phpmyadmin phpmyadmin phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to select_lang.lib.php, which reveals the path in a PHP er… NVD-CWE-Other
CVE-2005-0459 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347819 - mercuryboard mercuryboard index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter. NVD-CWE-Other
CVE-2005-0460 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm
347820 - - - Unknown vulnerability in NewsBruiser 2.x before 2.6.1 allows remote attackers to "take actions on comments." NVD-CWE-Other
CVE-2005-0461 2008-09-6 05:46 2005-05-2 Show GitHub Exploit DB Packet Storm