Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2431	8.8	重要 Network	Koha	Koha	KohaにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-31844	2026-05-11 10:59	2026-03-11	Show	GitHub Exploit DB Packet Storm

2432	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32167	2026-05-11 10:59	2026-04-14	Show	GitHub Exploit DB Packet Storm

2433	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32176	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

2434	7.5	重要 Network	マイクロソフト	.NET visual studio 2022	.NET のなりすましの脆弱性	CWE-138 特殊要素の不適切な無害化	CVE-2026-32178	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

2435	6.5	警告 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32603	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2436	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-34000	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2437	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性	CWE-805 不適切な長さの値によるバッファへのアクセス	CVE-2026-34002	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2438	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-34458	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2439	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34459	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2440	7.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34461	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345691	-	phpmyfamily	phpmyfamily	SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attacker…	NVD-CWE-Other	CVE-2005-0841	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345692	-	nortel	contivity	Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information.	CWE-310 Cryptographic Issues	CVE-2005-0844	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345693	-	funlabs	4x4_off-road_adventure_iii cabelas_big_game_hunter_2004_season cabelas_big_game_hunter_2005 cabelas_dangerous_hunts cabelas_deer_hunt_2005_season revolution secret_service_in_harms_…	Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote att…	NVD-CWE-Other	CVE-2005-0848	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345694	-	betaparticle	betaparticle_blog	betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct reque…	NVD-CWE-Other	CVE-2005-0854	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345695	-	coolforum	coolforum	Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter.	NVD-CWE-Other	CVE-2005-0857	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345696	-	coolforum	coolforum	Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter to entete.php or (2) the login parameter to r…	NVD-CWE-Other	CVE-2005-0858	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345697	-	delegate	delegate	Multiple buffer overflows in DeleGate before 8.11.1 may allow attackers to cause a denial of service or execute arbitrary code, possibly due to "overflows on arrays."	NVD-CWE-Other	CVE-2005-0861	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345698	-	phpopenchat	phpopenchat	Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or HTML via (1) the chatter parameter to regulars.php or (2) the chatter, chatter1,…	NVD-CWE-Other	CVE-2005-0863	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345699	-	phpsysinfo	phpsysinfo	phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to (1) class.OpenBSD.inc.php, (2) class.NetBSD.inc.php, (3) class.FreeBSD.inc.php, (4) class.Darwin.inc.php…	NVD-CWE-Other	CVE-2005-0869	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345700	-	phpsysinfo	phpsysinfo	Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program param…	NVD-CWE-Other	CVE-2005-0870	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed