Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2821 5.5 警告
Local
Canonical Livepatch Client CanonicalのLivepatch Clientにおける複数の脆弱性 CWE-306
CWE-732
CVE-2026-6369 2026-06-8 12:28 2026-04-20 Show GitHub Exploit DB Packet Storm
2822 7.8 重要
Local
Synology Inc. Hyper Backup Explorer Synology Inc.のHyper Backup Explorerにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2022-49042 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2823 5.9 警告
Network
Synology Inc. Note Station Client Synology Inc.のNote Station Clientにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2023-52951 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2824 4.1 警告
Network
Synology Inc. Hyper Backup Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2024-47263 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2825 4.3 警告
Network
Synology Inc. Hyper Backup Synology Inc.のHyper Backupにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2024-47273 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
2826 5.5 警告
Local
Vivo EasyShare VivoのEasyShareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2025-15515 2026-06-8 12:28 2026-03-13 Show GitHub Exploit DB Packet Storm
2827 8.6 重要
Network
Belden Inc. HiOS Switch Software Belden Inc.のHiOS Switch Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2025-15620 2026-06-8 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
2828 4.9 警告
Network
Extreme Networks, Inc. ExtremeCloud IQ Site Engine Extreme Networks, Inc.のExtremeCloud IQ Site Engineにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護
CVE-2026-0689 2026-06-8 12:28 2026-03-2 Show GitHub Exploit DB Packet Storm
2829 9.8 緊急
Network
Tesseract OCR project Tesseract OCR ZapolnochのTesseract OCRにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-26832 2026-06-8 12:28 2026-03-25 Show GitHub Exploit DB Packet Storm
2830 9.1 緊急
Network
Bytedance Inc. DeerFlow Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40518 2026-06-8 12:28 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
343851 - xli
altlinux
suse
xli
alt_linux
suse_linux
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling t… NVD-CWE-Other
CVE-2005-0638 2018-10-20 00:31 2005-03-2 Show GitHub Exploit DB Packet Storm
343852 - stadtaus tell_a_friend_script PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parame… CWE-94
Code Injection
CVE-2005-0679 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343853 - microsoft windows_2003_server
windows_xp
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destinatio… NVD-CWE-Other
CVE-2005-0688 2018-10-20 00:31 2005-03-5 Show GitHub Exploit DB Packet Storm
343854 - argosoft ftp_server Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5. NVD-CWE-Other
CVE-2005-0696 2018-10-20 00:31 2005-03-8 Show GitHub Exploit DB Packet Storm
343855 - mcnews mcnews PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote … CWE-94
Code Injection
CVE-2005-0720 2018-10-20 00:31 2005-03-8 Show GitHub Exploit DB Packet Storm
343856 - linux linux_kernel ptrace in Linux kernel 2.6.8.1 does not properly verify addresses on the amd64 platform, which allows local users to cause a denial of service (kernel crash). CWE-399
 Resource Management Errors
CVE-2005-0756 2018-10-20 00:31 2005-06-8 Show GitHub Exploit DB Packet Storm
343857 - openslp openslp Multiple buffer overflows in OpenSLP before 1.1.5 allow remote attackers to have an unknown impact via malformed SLP packets. NVD-CWE-Other
CVE-2005-0769 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343858 - platinumftp platinumftpserver PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via multiple connection attempts with a \ (backslash) in the username. NVD-CWE-Other
CVE-2005-0779 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343859 - mcnews mcnews PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web … NVD-CWE-Other
CVE-2005-0800 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm
343860 - subdreamer subdreamer_light SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via certain parameters that are used as globa… NVD-CWE-Other
CVE-2005-0805 2018-10-20 00:31 2005-05-2 Show GitHub Exploit DB Packet Storm