Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3191	9.1	緊急 Network	CyberPanel	CyberPanel	CyberPanelにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41473	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3192	8.2	重要 Local	レッドハット	Red Hat Advanced Cluster Management for Kubernetes	レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-4740	2026-04-30 12:08	2026-04-7	Show	GitHub Exploit DB Packet Storm

3193	9.8	緊急 Network	Pipecat	Pipecat	Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-62373	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

3194	7.8	重要 Local	Amazon.com, Inc.	Kiro IDE	Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-0830	2026-04-30 12:08	2026-01-9	Show	GitHub Exploit DB Packet Storm

3195	5.4	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-25720	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3196	9.8	緊急 Network	huggingface	LeRobot	huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-25874	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

3197	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-27841	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3198	9.1	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-27843	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3199	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-33524	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3200	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33666	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351601	-	jason_hines	phpweblog	PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH para…	NVD-CWE-Other	CVE-2005-0698	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

351602	-	aztek_forum	aztek_forum	The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.	NVD-CWE-Other	CVE-2005-0700	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

351603	-	phpmyfaq	phpmyfaq	SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.	NVD-CWE-Other	CVE-2005-0702	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

351604	-	xerox	workcentre_165 workcentre_175 workcentre_2128 workcentre_2636 workcentre_32_color workcentre_35 workcentre_3545 workcentre_40_color workcentre_45 workcentre_55 workcentr…	Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032,…	NVD-CWE-Other	CVE-2005-0703	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

351605	-	apple	mac_os_x mac_os_x_server	The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.	NVD-CWE-Other	CVE-2005-0713	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

351606	-	apple	mac_os_x mac_os_x_server	AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.	NVD-CWE-Other	CVE-2005-0715	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

351607	-	apple	mac_os_x mac_os_x_server	Stack-based buffer overflow in the Core Foundation Library in Mac OS X 10.3.5 and 10.3.6, and possibly earlier versions, allows local users to execute arbitrary code via a long CF_CHARSET_PATH enviro…	NVD-CWE-Other	CVE-2005-0716	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

351608	-	yahoo	messenger	Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.	NVD-CWE-Other	CVE-2005-0737	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

351609	-	openbsd	openbsd	The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments t…	NVD-CWE-Other	CVE-2005-0740	2008-09-6 05:47	2005-01-13	Show	GitHub Exploit DB Packet Storm

351610	-	yabb	yabb	Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.	NVD-CWE-Other	CVE-2005-0741	2008-09-6 05:47	2005-03-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed