Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2991 6.5 警告
Network 		The Kyverno Authors Kyverno The Kyverno AuthorsのKyvernoにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23881 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
2992 5.9 警告
Network 		octoprint.org OctoPrint octoprint.orgのOctoPrintにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-23892 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
2993 5.3 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-23961 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
2994 7.5 重要
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23962 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
2995 6.5 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23963 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
2996 5.4 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける複数の脆弱性 CWE-639
CWE-863
CVE-2026-23964 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
2997 5.3 警告
Network 		Linux Foundation rekor Linux Foundationのrekorにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-24117 2026-02-4 18:35 2026-01-22 Show GitHub Exploit DB Packet Storm
2998 6.1 警告
Network 		typemill typemill typemillにおける複数の脆弱性 CWE-116
CWE-79
CWE-79
CVE-2026-24127 2026-02-4 18:35 2026-01-23 Show GitHub Exploit DB Packet Storm
2999 6.5 警告
Network 		Shenzhen Tenda Technology Co.,Ltd. w30e ファームウェア Shenzhen Tenda Technology Co.,Ltd.のw30e ファームウェアにおける過度に許容されるクロスドメインホワイトリストに関する脆弱性 CWE-942
過度に許容されるクロスドメインホワイトリスト 		CVE-2026-24435 2026-02-4 18:35 2026-01-26 Show GitHub Exploit DB Packet Storm
3000 6.3 警告
Local 		Sensio Labs Symfony Sensio LabsのSymfonyにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-24739 2026-02-4 18:35 2026-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348001 - xerox document_centre_265
document_centre_332
document_centre_340
document_centre_420
document_centre_490
document_centre_535
document_centre_555 		Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication. NVD-CWE-Other
CVE-2005-2645 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm
348002 - xerox document_centre_220
document_centre_230
document_centre_240
document_centre_255
document_centre_265
document_centre_332
document_centre_340
document_centre_420
document_centre… 		Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or rea… NVD-CWE-Other
CVE-2005-2646 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm
348003 - xerox document_centre_265
document_centre_332
document_centre_340
document_centre_420
document_centre_490
document_centre_535
document_centre_555 		Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitr… NVD-CWE-Other
CVE-2005-2647 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm
348004 - emefa emefa_guestbook Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters. NVD-CWE-Other
CVE-2005-2650 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm
348005 - maildrop maildrop lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments. NVD-CWE-Other
CVE-2005-2655 2008-09-6 05:52 2005-08-31 Show GitHub Exploit DB Packet Storm
348006 - polygen polygen Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unautho… NVD-CWE-Other
CVE-2005-2656 2008-09-6 05:52 2005-09-7 Show GitHub Exploit DB Packet Storm
348007 - softwolves_software turquoise_superstat Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month. NVD-CWE-Other
CVE-2005-2658 2008-09-6 05:52 2005-09-16 Show GitHub Exploit DB Packet Storm
348008 - apachetop apachetop apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on atop.debug. NVD-CWE-Other
CVE-2005-2660 2008-09-6 05:52 2005-10-1 Show GitHub Exploit DB Packet Storm
348009 - hauri livecall
virobot_advanced_server
virobot_expert
virobot_linux_server 		Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via "… NVD-CWE-Other
CVE-2005-2670 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm
348010 - woltlab burning_board SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters. NVD-CWE-Other
CVE-2005-2673 2008-09-6 05:52 2005-08-23 Show GitHub Exploit DB Packet Storm