Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2241	6.1	警告 Network	Joakim Nygard and Jacob Oettinger	Webgrind	Webgrind projectのWebgrindにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2023-54341	2026-02-5 15:51	2026-01-13	Show	GitHub Exploit DB Packet Storm

2242	5.4	警告 Network	tagify project	tagify	FactorialのTagifyにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-13983	2026-02-5 15:51	2026-01-28	Show	GitHub Exploit DB Packet Storm

2243	9.8	緊急 Network	Petlibro, Inc.	PETLIBRO	Petlibro, Inc.のPETLIBROにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2025-15115	2026-02-5 15:50	2026-01-4	Show	GitHub Exploit DB Packet Storm

2244	7.5	重要 Network	Redlib	Redlib	Redlibにおける複数の脆弱性	CWE-400 CWE-502	CVE-2025-30160	2026-02-5 15:50	2025-03-20	Show	GitHub Exploit DB Packet Storm

2245	6.5	警告 Network	IBM	Sterling Connect:Express Adapter for Sterling B2B Integrator	IBMのSterling Connect:Express Adapter for Sterling B2B Integratorにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-36065	2026-02-5 15:50	2026-01-20	Show	GitHub Exploit DB Packet Storm

2246	6.1	警告 Network	IBM	Sterling Connect:Express Adapter for Sterling B2B Integrator	IBMのSterling Connect:Express Adapter for Sterling B2B Integratorにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-36066	2026-02-5 15:50	2026-01-20	Show	GitHub Exploit DB Packet Storm

2247	5.4	警告 Network	IBM	Sterling Connect:Express Adapter for Sterling B2B Integrator	IBMのSterling Connect:Express Adapter for Sterling B2B Integratorにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-36113	2026-02-5 15:50	2026-01-20	Show	GitHub Exploit DB Packet Storm

2248	6.5	警告 Network	IBM	Sterling Connect:Express Adapter for Sterling B2B Integrator	IBMのSterling Connect:Express Adapter for Sterling B2B Integratorにおけるセッションの固定化の脆弱性	CWE-384 セッションの固定化	CVE-2025-36115	2026-02-5 15:50	2026-01-20	Show	GitHub Exploit DB Packet Storm

2249	8.2	重要 Network	Petlibro, Inc.	PETLIBRO	Petlibro, Inc.のPETLIBROにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-3646	2026-02-5 15:50	2026-01-4	Show	GitHub Exploit DB Packet Storm

2250	5.3	警告 Network	Petlibro, Inc.	PETLIBRO	Petlibro, Inc.のPETLIBROにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2025-3652	2026-02-5 15:50	2026-01-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347841	-	cupidsystems	cis_webserver	Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.	NVD-CWE-Other	CVE-2005-0574	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347842	-	sun	solaris	Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.	NVD-CWE-Other	CVE-2005-0576	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347843	-	dna	mkbold-mkitalic	Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files.	NVD-CWE-Other	CVE-2005-0577	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347844	-	freenx	freenx	nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.	NVD-CWE-Other	CVE-2005-0579	2008-09-6 05:46	2005-02-25	Show	GitHub Exploit DB Packet Storm

347845	-	krzysztof_dabrowski	cmd5checkpw	cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.	NVD-CWE-Other	CVE-2005-0580	2008-09-6 05:46	2005-02-25	Show	GitHub Exploit DB Packet Storm

347846	-	apple	mac_os_x_server	Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.	NVD-CWE-Other	CVE-2005-0594	2008-09-6 05:46	2005-05-4	Show	GitHub Exploit DB Packet Storm

347847	-	php	php	PHP 4 (PHP4) allows attackers to cause a denial of service (daemon crash) by using the readfile function on a file whose size is a multiple of the page size.	NVD-CWE-Other	CVE-2005-0596	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

347848	-	webmod	webmod	Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less …	NVD-CWE-Other	CVE-2005-0608	2008-09-6 05:46	2005-02-28	Show	GitHub Exploit DB Packet Storm

347849	-	freebsd	freebsd	Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, …	NVD-CWE-Other	CVE-2005-0610	2008-09-6 05:46	2005-04-12	Show	GitHub Exploit DB Packet Storm

347850	-	cisco	ipvc-3510-mcu ipvc-3520-gw-2b ipvc-3520-gw-2b2v ipvc-3520-gw-2v ipvc-3520-gw-4v ipvc-3525-gw-1p ipvc-3530-vta	Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify c…	NVD-CWE-Other	CVE-2005-0612	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed