Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
211 5.5 警告
Local 		Leejet Stable-diffusion.cpp LeejetのStable-diffusion.cppにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-47748 2026-06-26 11:50 2026-06-16 Show GitHub Exploit DB Packet Storm
212 7.8 重要
Local 		Leejet Stable-diffusion.cpp LeejetのStable-diffusion.cppにおける複数の脆弱性 New CWE-122
CWE-787
CVE-2026-47749 2026-06-26 11:50 2026-06-16 Show GitHub Exploit DB Packet Storm
213 7.8 重要
Local 		Leejet Stable-diffusion.cpp LeejetのStable-diffusion.cppにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2026-47750 2026-06-26 11:50 2026-06-16 Show GitHub Exploit DB Packet Storm
214 9.8 緊急
Network 		日本ナショナルインスツルメンツ NI gRPC Device Server
InstruementStudio 		日本ナショナルインスツルメンツのInstruementStudio等の複数製品における信頼できないポインタデリファレンスに関する脆弱性 New CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-48137 2026-06-26 11:50 2026-06-19 Show GitHub Exploit DB Packet Storm
215 7.5 重要
Network 		日本ナショナルインスツルメンツ NI gRPC Device Server
InstruementStudio 		日本ナショナルインスツルメンツのInstruementStudio等の複数製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り 		CVE-2026-48138 2026-06-26 11:50 2026-06-19 Show GitHub Exploit DB Packet Storm
216 7.5 重要
Network 		日本ナショナルインスツルメンツ NI gRPC Device Server
InstruementStudio 		日本ナショナルインスツルメンツのInstruementStudio等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-48139 2026-06-26 11:50 2026-06-19 Show GitHub Exploit DB Packet Storm
217 6.5 警告
Network 		日本ナショナルインスツルメンツ NI gRPC Device Server
InstruementStudio 		日本ナショナルインスツルメンツのInstruementStudio等の複数製品における不正な型変換に関する脆弱性 New CWE-704
不正な型変換またはキャスト 		CVE-2026-48140 2026-06-26 11:50 2026-06-19 Show GitHub Exploit DB Packet Storm
218 7.5 重要
Network 		日本ナショナルインスツルメンツ NI gRPC Device Server
InstruementStudio 		日本ナショナルインスツルメンツのInstruementStudio等の複数製品における有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-48141 2026-06-26 11:50 2026-06-19 Show GitHub Exploit DB Packet Storm
219 6.8 警告
Adjacent 		langchain LangGraph Checkpoint langchainのLangGraph Checkpointにおける複数の脆弱性 New CWE-502
CWE-913
CVE-2026-48775 2026-06-26 11:50 2026-06-16 Show GitHub Exploit DB Packet Storm
220 7.5 重要
Network 		Schneider Electric EcoStruxure Panel Server PAS600v2 Firmware
EcoStruxure Panel Server PAS400 Firmware
EcoStruxure Panel Server PAS800 Firmware
EcoSt… 		Schneider Electric のEcoStruxure Panel Server PAS400 Firmware等の複数製品におけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-6866 2026-06-26 11:50 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343581 - gallery_project gallery Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary files via unknown vectors. NVD-CWE-Other
CVE-2005-4023 2018-10-20 00:40 2005-12-5 Show GitHub Exploit DB Packet Storm
343582 - netart_media blog_system Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php. NVD-CWE-Other
CVE-2005-4049 2018-10-20 00:40 2005-12-7 Show GitHub Exploit DB Packet Storm
343583 - multi-tech_systems multivoip Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (… NVD-CWE-Other
CVE-2005-4050 2018-10-20 00:40 2005-12-7 Show GitHub Exploit DB Packet Storm
343584 - e107 e107 e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php. NVD-CWE-Other
CVE-2005-4051 2018-10-20 00:40 2005-12-7 Show GitHub Exploit DB Packet Storm
343585 - - - e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating. NOTE: in the default insta… NVD-CWE-Other
CVE-2005-4052 2018-10-20 00:40 2005-12-7 Show GitHub Exploit DB Packet Storm
343586 - cowiki cowiki Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html. NVD-CWE-Other
CVE-2005-4053 2018-10-20 00:40 2005-12-7 Show GitHub Exploit DB Packet Storm
343587 - daniel_stenberg curl Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via cer… CWE-189
Numeric Errors 		CVE-2005-4077 2018-10-20 00:40 2005-12-8 Show GitHub Exploit DB Packet Storm
343588 - phpmyadmin phpmyadmin The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can… NVD-CWE-Other
CVE-2005-4079 2018-10-20 00:40 2005-12-8 Show GitHub Exploit DB Packet Storm
343589 - horde imp Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and s… NVD-CWE-Other
CVE-2005-4080 2018-10-20 00:40 2005-12-8 Show GitHub Exploit DB Packet Storm
343590 - alisveristr alisveristr_e-commerce Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters i… NVD-CWE-Other
CVE-2005-4081 2018-10-20 00:40 2005-12-8 Show GitHub Exploit DB Packet Storm