Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3721 5.4 警告
Network 		OpenProject OpenProject OpenProjectにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23625 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3722 6.5 警告
Network 		OpenProject OpenProject OpenProjectにおける誤ったセッションへのデータ要素の漏えいに関する脆弱性 CWE-488
誤ったセッションへのデータ要素の漏えい 		CVE-2026-23646 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3723 4.3 警告
Network 		OpenProject OpenProject OpenProjectにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-23721 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3724 5.3 警告
Network 		Linux Foundation rekor Linux FoundationのrekorにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23831 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3725 6.1 警告
Network 		Lee Peuker Movary Lee PeukerのMovaryにおける複数の脆弱性 CWE-20
CWE-79
CVE-2026-23841 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3726 6.5 警告
Network 		The Kyverno Authors Kyverno The Kyverno AuthorsのKyvernoにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23881 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
3727 5.9 警告
Network 		octoprint.org OctoPrint octoprint.orgのOctoPrintにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-23892 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
3728 5.3 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-23961 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3729 7.5 重要
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23962 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3730 6.5 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23963 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348931 - tashcom aspedit Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users to view the password. NVD-CWE-Other
CVE-2005-4777 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348932 - - - The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend the computer and possibly perform certain other unauthorized ac… NVD-CWE-Other
CVE-2005-4778 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348933 - - - This vulnerablility is addressed in the following product release: SUSE, Linux, 10.0 2005-10-07 NVD-CWE-Other
CVE-2005-4778 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348934 - netbsd netbsd verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the functionality of the verified exec kernel subsystem and might allow lo… NVD-CWE-Other
CVE-2005-4779 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348935 - netbsd netbsd NetBSD 2.0 before 2.0.4, 2.1 before 2.1.1, and 3, when the kernel is compiled with "options DIAGNOSTIC," allows local users to cause a denial of service (kernel assertion panic) via a negative linger… NVD-CWE-Other
CVE-2005-4782 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348936 - netbsd netbsd kernfs_xread in kernfs_vnops.c in NetBSD before 20050831 does not check for a negative offset when reading the message buffer, which allows local users to read arbitrary kernel memory. NVD-CWE-Other
CVE-2005-4783 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348937 - austin_group posix Multiple buffer overflows in the POSIX readdir_r function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via (1) a symlink attack th… NVD-CWE-Other
CVE-2005-4784 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348938 - suse suse_linux resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules for USB devices via "alternate syntax for specifying USB devices." NVD-CWE-Other
CVE-2005-4788 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348939 - suse suse_linux resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude rules in some situations, which allows local users to bypass intended access restr… NVD-CWE-Other
CVE-2005-4789 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
348940 - phpwebsite phpwebsite SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. NOTE: the p… NVD-CWE-Other
CVE-2005-4792 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm