Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
211441	7.5	危険	MySQL AB アップル zlib サン・マイクロシステムズ Debian FreeBSD ターボリナックスヒューレット・パッカード SUSE Fedora Project レッドハット	-	データ圧縮ライブラリ zlib におけるバッファーオーバーフローの脆弱性	-	CVE-2005-2096	2015-05-22 14:31	2005-07-6	Show	GitHub Exploit DB Packet Storm

211442	5	警告	ターボリナックス MySQL AB レッドハット	-	zlib における不正な圧縮ファイルによるバッファオーバーフローの脆弱性	-	CVE-2005-1849	2015-05-22 14:29	2005-07-21	Show	GitHub Exploit DB Packet Storm

211443	5	警告	bzip.org アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	bzip2 の解凍時における無限ループによるサービス運用妨害 (DoS) の脆弱性	-	CVE-2005-1260	2015-05-22 14:28	2005-05-23	Show	GitHub Exploit DB Packet Storm

211444	3.7	注意	bzip.org アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	bzip2 の解凍処理における競合状態の脆弱性	-	CVE-2005-0953	2015-05-22 14:28	2005-05-27	Show	GitHub Exploit DB Packet Storm

211445	7.5	危険	サン・マイクロシステムズサイバートラスト株式会社ターボリナックスレッドハット	-	Zlib の gzprintf() におけるバッファオーバーフローの脆弱性	-	CVE-2003-0107	2015-05-22 14:27	2003-02-22	Show	GitHub Exploit DB Packet Storm

211446	6.8	警告	Kazuhiro Inaba 木村利靖	-	BGA32.DLL および QBga32.DLL における複数の脆弱性	CWE-Other その他	CVE-2003-0107 CVE-2005-0953 CVE-2005-1260 CVE-2005-1849 CVE-2005-2096	2015-05-22 14:25	2015-05-19	Show	GitHub Exploit DB Packet Storm

211447	4.3	警告	SEOgento	-	Magento 用 SEOgento プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3243	2015-05-22 13:49	2012-01-11	Show	GitHub Exploit DB Packet Storm

211448	6.8	警告	osCMax.com	-	osCMax の管理パネルにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6691	2015-05-22 13:43	2012-04-1	Show	GitHub Exploit DB Packet Storm

211449	7.5	危険	osCMax.com	-	osCMax の管理パネルにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1665	2015-05-22 13:43	2012-04-1	Show	GitHub Exploit DB Packet Storm

211450	4.3	警告	osCMax.com	-	osCMax の管理パネルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1664	2015-05-22 13:43	2012-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2411	5.3	MEDIUM Local	-	-	A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-bas…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-8212	2026-05-14 00:31	2026-05-10	Show	GitHub Exploit DB Packet Storm

2412	5.3	MEDIUM Local	-	-	A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manip…	CWE-119 CWE-122 Incorrect Access of Indexable Resource ('Range Error') Heap-based Buffer Overflow	CVE-2026-8213	2026-05-14 00:31	2026-05-10	Show	GitHub Exploit DB Packet Storm

2413	6.4	MEDIUM Network	-	-	Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attac…	CWE-79 Cross-site Scripting	CVE-2021-47929	2026-05-14 00:30	2026-05-10	Show	GitHub Exploit DB Packet Storm

2414	6.4	MEDIUM Network	-	-	Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters in the text editing e…	CWE-79 Cross-site Scripting	CVE-2021-47931	2026-05-14 00:30	2026-05-10	Show	GitHub Exploit DB Packet Storm

2415	7.5	HIGH Network	-	-	memono Notepad 4.2 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character buffers into note fields. Attackers can generate a p…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2021-47944	2026-05-14 00:30	2026-05-10	Show	GitHub Exploit DB Packet Storm

2416	7.8	HIGH Local	-	-	Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attacke…	CWE-428 Unquoted Search Path or Element	CVE-2021-47945	2026-05-14 00:30	2026-05-10	Show	GitHub Exploit DB Packet Storm

2417	6.1	MEDIUM Local	-	-	Summarize versions through 0.14.1, fixed in commit 0cfb0fb, creates the daemon configuration directory and file with default filesystem permissions that may be world-readable on Unix-like systems, al…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2026-45222	2026-05-14 00:30	2026-05-12	Show	GitHub Exploit DB Packet Storm

2418	8.1	HIGH Network	-	-	MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authentication checks by reusing Authent…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2026-44400	2026-05-14 00:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

2419	8.1	HIGH Network	-	-	SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json fi…	CWE-22 Path Traversal	CVE-2026-7807	2026-05-14 00:29	2026-05-9	Show	GitHub Exploit DB Packet Storm

2420	8.8	HIGH Network	-	-	CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink attacks through the filemanager con…	CWE-59 Link Following	CVE-2021-47949	2026-05-14 00:29	2026-05-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed