Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
311 8.1 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-42296 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
312 8.3 重要
Network 		argoproj Argo Workflows Argo Project AuthorsのArgo Workflowsにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-42297 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
313 6.8 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-295
CWE-306
CWE-863
CVE-2026-42312 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
314 8.3 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-441
CWE-863
CWE-918
CVE-2026-42313 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
315 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-42314 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
316 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 New CWE-22
CWE-36
CVE-2026-42315 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
317 7.5 重要
Network 		mongoosejs mongoose mongoosejsのmongooseにおけるインジェクションに関する脆弱性 New CWE-74
インジェクション 		CVE-2026-42334 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
318 7.5 重要
Network 		Getarcane Arcane GetarcaneのArcaneにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-42461 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
319 8.1 重要
Network 		FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42463 2026-05-18 11:30 2026-05-13 Show GitHub Exploit DB Packet Storm
320 7.8 重要
Local 		マイクロソフト Microsoft Office マイクロソフトのMicrosoft Officeにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-42831 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346391 - phpbb_group phpbb phpBB 2.0.17 and earlier, when the register_long_arrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associ… NVD-CWE-Other
CVE-2005-3417 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346392 - phpbb_group phpbb Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to usercp_register.php, (… NVD-CWE-Other
CVE-2005-3418 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346393 - phpbb_group phpbb SQL injection vulnerability in usercp_register.php in phpBB 2.0.17 allows remote attackers to execute arbitrary SQL commands via the signature_bbcode_uid parameter, which is not properly initialized. NVD-CWE-Other
CVE-2005-3419 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346394 - phpbb_group phpbb usercp_register.php in phpBB 2.0.17 allows remote attackers to modify regular expressions and execute PHP code via the signature_bbcode_uid parameter, as demonstrated by injecting an "e" modifier int… NVD-CWE-Other
CVE-2005-3420 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346395 - thomas_rybak minigal_2 MiniGal 2 (MG2) 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to * (wildcard) and the page parameter set to all. NVD-CWE-Other
CVE-2005-3432 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346396 - mirabilis icq Buffer overflow in Mirabilis ICQ 2003a allows user-assisted attackers to execute arbitrary code by convincing a user to enter long strings into the First Name and Last Name fields. NVD-CWE-Other
CVE-2005-3433 2016-10-18 12:35 2005-11-2 Show GitHub Exploit DB Packet Storm
346397 - nero neronet Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-e… NVD-CWE-Other
CVE-2005-3484 2016-10-18 12:35 2005-11-4 Show GitHub Exploit DB Packet Storm
346398 - glider collectn_kill Buffer overflow in Glider Collect'n kill 1.0.0.0 allows remote attackers to execute arbitrary code via a gl_playerEnter command with a long player name. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-3485 2016-10-18 12:35 2005-11-4 Show GitHub Exploit DB Packet Storm
346399 - scorched_3d scorched_3d Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) Serv… NVD-CWE-Other
CVE-2005-3486 2016-10-18 12:35 2005-11-4 Show GitHub Exploit DB Packet Storm
346400 - scorched_3d scorched_3d Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::ser… NVD-CWE-Other
CVE-2005-3487 2016-10-18 12:35 2005-11-4 Show GitHub Exploit DB Packet Storm