Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2801 8.8 重要
Network
it-novum GmbH openITCOCKPIT it-novum GmbHのopenITCOCKPITにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-24893 2026-04-30 12:16 2026-04-14 Show GitHub Exploit DB Packet Storm
2802 9.8 緊急
Network
サムスン escargot サムスンのescargotにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-25205 2026-04-30 12:16 2026-04-13 Show GitHub Exploit DB Packet Storm
2803 9.1 緊急
Network
サムスン escargot サムスンのescargotにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-25206 2026-04-30 12:16 2026-04-13 Show GitHub Exploit DB Packet Storm
2804 9.8 緊急
Network
サムスン escargot サムスンのescargotにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-25207 2026-04-30 12:16 2026-04-13 Show GitHub Exploit DB Packet Storm
2805 9.8 緊急
Network
サムスン escargot サムスンのescargotにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-25208 2026-04-30 12:16 2026-04-13 Show GitHub Exploit DB Packet Storm
2806 9.1 緊急
Network
サムスン escargot サムスンのescargotにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-25209 2026-04-30 12:16 2026-04-13 Show GitHub Exploit DB Packet Storm
2807 7.8 重要
Local
デル Alienware Command Center デルのAlienware Command Centerにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行
CVE-2026-25908 2026-04-30 12:16 2026-04-27 Show GitHub Exploit DB Packet Storm
2808 7.2 重要
Network
デル PowerProtect DP Series Appliance
data domain operating system
デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-26942 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
2809 7.2 重要
Network
デル PowerProtect DP Series Appliance
data domain operating system
デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-26943 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
2810 6.7 警告
Local
デル PowerProtect DP Series Appliance
data domain operating system
デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-26951 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346561 - - - SQL injection vulnerability in module/down.inc.php in jportal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the search field to download.php. NVD-CWE-Other
CVE-2005-3052 2016-10-18 12:32 2005-09-24 Show GitHub Exploit DB Packet Storm
346562 - powerarchiver powerarchiver_2002
powerarchiver_2003
powerarchiver_2004
powerarchiver_2006
Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive. NVD-CWE-Other
CVE-2005-3061 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346563 - alstrasoft e-friends PHP remote file inclusion vulnerability in index.php in AlstraSoft E-Friends 4.0 allows remote attackers to execute arbitrary PHP code via the mode parameter. NVD-CWE-Other
CVE-2005-3062 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346564 - unu_networks mailgust SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page. NVD-CWE-Other
CVE-2005-3063 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346565 - cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2005-3083 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346566 - mantis mantis Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, whic… NVD-CWE-Other
CVE-2005-3090 2016-10-18 12:32 2005-09-29 Show GitHub Exploit DB Packet Storm
346567 - image-line_software fl_studio Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a (1) .mid or (2) .wav file. NVD-CWE-Other
CVE-2005-3092 2016-10-18 12:32 2005-09-29 Show GitHub Exploit DB Packet Storm
346568 - nateon nateon_messenger The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method. NVD-CWE-Other
CVE-2005-3113 2016-10-18 12:32 2005-09-30 Show GitHub Exploit DB Packet Storm
346569 - nateon nateon_messenger Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long thi… NVD-CWE-Other
CVE-2005-3114 2016-10-18 12:32 2005-09-30 Show GitHub Exploit DB Packet Storm
346570 - lucidcms lucidcms SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field. NVD-CWE-Other
CVE-2005-3130 2016-10-18 12:32 2005-10-5 Show GitHub Exploit DB Packet Storm