Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2431	8.8	重要 Network	Koha	Koha	KohaにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-31844	2026-05-11 10:59	2026-03-11	Show	GitHub Exploit DB Packet Storm

2432	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32167	2026-05-11 10:59	2026-04-14	Show	GitHub Exploit DB Packet Storm

2433	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32176	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

2434	7.5	重要 Network	マイクロソフト	.NET visual studio 2022	.NET のなりすましの脆弱性	CWE-138 特殊要素の不適切な無害化	CVE-2026-32178	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

2435	6.5	警告 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32603	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2436	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-34000	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2437	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性	CWE-805 不適切な長さの値によるバッファへのアクセス	CVE-2026-34002	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2438	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-34458	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2439	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34459	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

2440	7.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34461	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345721	-	faststone	4in1_browser	Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.	NVD-CWE-Other	CVE-2005-0950	2017-07-11 10:32	2005-03-29	Show	GitHub Exploit DB Packet Storm

345722	-	bay_technical_associates	rpc3_telnet	Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.	NVD-CWE-Other	CVE-2005-0957	2017-07-11 10:32	2005-03-31	Show	GitHub Exploit DB Packet Storm

345723	-	lighthouse_development	squirrelcart	SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show…	NVD-CWE-Other	CVE-2005-0962	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345724	-	toshiba	acpi_flash_bios	An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though …	NVD-CWE-Other	CVE-2005-0963	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345725	-	kerio	personal_firewall	Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictio…	NVD-CWE-Other	CVE-2005-0964	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345726	-	apple opendarwin	mac_os_x mac_os_x_server darwin_kernel	Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to …	NVD-CWE-Other	CVE-2005-0975	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345727	-	ivt	bluesoleil	Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.	NVD-CWE-Other	CVE-2005-0978	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345728	-	netmanage	rumba	Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using …	NVD-CWE-Other	CVE-2005-0979	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345729	-	phpmyadmin	phpmyadmin	Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.	NVD-CWE-Other	CVE-2005-0992	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

345730	-	francisco_burzi	php-nuke	Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) th…	NVD-CWE-Other	CVE-2005-1000	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed