Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 8.1 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-42296 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
312 8.3 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-42297 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
313 6.8 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-295
CWE-306
CWE-863
CVE-2026-42312 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
314 8.3 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-441
CWE-863
CWE-918
CVE-2026-42313 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
315 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-42314 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
316 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-22
CWE-36
CVE-2026-42315 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
317 7.5 重要
Network 		mongoosejs mongoose mongoosejsのmongooseにおけるインジェクションに関する脆弱性 New CWE-74
インジェクション 		CVE-2026-42334 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
318 7.5 重要
Network 		Getarcane Arcane GetarcaneのArcaneにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-42461 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
319 8.1 重要
Network 		FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42463 2026-05-18 11:30 2026-05-13 Show GitHub Exploit DB Packet Storm
320 7.8 重要
Local 		マイクロソフト Microsoft Office マイクロソフトのMicrosoft Officeにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-42831 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346371 - xoops xoops Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a .. (dot dot) in the xoopsConfig[language] parameter. NVD-CWE-Other
CVE-2005-3680 2016-10-18 12:36 2005-11-19 Show GitHub Exploit DB Packet Storm
346372 - xoops wf-downloads SQL injection vulnerability in viewcat.php in XOOPS WF-Downloads module 2.05 allows remote attackers to execute arbitrary SQL commands via the list parameter. NVD-CWE-Other
CVE-2005-3681 2016-10-18 12:36 2005-11-19 Show GitHub Exploit DB Packet Storm
346373 - hitachi ip5000_voip_wifi_phone Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuratio… NVD-CWE-Other
CVE-2005-3719 2016-10-18 12:36 2005-11-21 Show GitHub Exploit DB Packet Storm
346374 - hitachi ip5000_voip_wifi_phone The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions. NVD-CWE-Other
CVE-2005-3720 2016-10-18 12:36 2005-11-21 Show GitHub Exploit DB Packet Storm
346375 - hitachi ip5000_voip_wifi_phone The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configu… NVD-CWE-Other
CVE-2005-3721 2016-10-18 12:36 2005-11-21 Show GitHub Exploit DB Packet Storm
346376 - hitachi ip5000_voip_wifi_phone The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials. NVD-CWE-Other
CVE-2005-3722 2016-10-18 12:36 2005-11-21 Show GitHub Exploit DB Packet Storm
346377 - ukranian_national_antivirus una Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic… NVD-CWE-Other
CVE-2005-3381 2016-10-18 12:35 2005-10-30 Show GitHub Exploit DB Packet Storm
346378 - sophos sophos_anti-virus Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is no… NVD-CWE-Other
CVE-2005-3382 2016-10-18 12:35 2005-10-30 Show GitHub Exploit DB Packet Storm
346379 - - - SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. NVD-CWE-Other
CVE-2005-3383 2016-10-18 12:35 2005-10-30 Show GitHub Exploit DB Packet Storm
346380 - techno_dreams techno_dreams_guest_book SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp. NVD-CWE-Other
CVE-2005-3384 2016-10-18 12:35 2005-10-30 Show GitHub Exploit DB Packet Storm