Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3721 5.4 警告
Network 		OpenProject OpenProject OpenProjectにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23625 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3722 6.5 警告
Network 		OpenProject OpenProject OpenProjectにおける誤ったセッションへのデータ要素の漏えいに関する脆弱性 CWE-488
誤ったセッションへのデータ要素の漏えい 		CVE-2026-23646 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3723 4.3 警告
Network 		OpenProject OpenProject OpenProjectにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-23721 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3724 5.3 警告
Network 		Linux Foundation rekor Linux FoundationのrekorにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-23831 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3725 6.1 警告
Network 		Lee Peuker Movary Lee PeukerのMovaryにおける複数の脆弱性 CWE-20
CWE-79
CVE-2026-23841 2026-02-4 18:36 2026-01-19 Show GitHub Exploit DB Packet Storm
3726 6.5 警告
Network 		The Kyverno Authors Kyverno The Kyverno AuthorsのKyvernoにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23881 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
3727 5.9 警告
Network 		octoprint.org OctoPrint octoprint.orgのOctoPrintにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-23892 2026-02-4 18:36 2026-01-27 Show GitHub Exploit DB Packet Storm
3728 5.3 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-23961 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3729 7.5 重要
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23962 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
3730 6.5 警告
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-23963 2026-02-4 18:36 2026-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349131 - gallery_project gallery Directory traversal vulnerability in the gallery script in Gallery 2.0 (G2) allows remote attackers to read or include arbitrary files via ".." sequences in the g2_itemId parameter. NVD-CWE-Other
CVE-2005-3251 2008-09-6 05:53 2005-10-18 Show GitHub Exploit DB Packet Storm
349132 - nathan_neulinger cgiwrap The CGIwrap program before 3.9 on Debian GNU/Linux uses an incorrect minimum value of 100 for a UID to determine whether it can perform a seteuid operation, which could allow attackers to execute cod… NVD-CWE-Other
CVE-2005-3254 2008-09-6 05:53 2005-10-19 Show GitHub Exploit DB Packet Storm
349133 - - - The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in Debian GNU/Linux provide access to debugging CGIs under the web document root, which allows remote attackers to obtain sensitive information… NVD-CWE-Other
CVE-2005-3255 2008-09-6 05:53 2005-10-19 Show GitHub Exploit DB Packet Storm
349134 - raphael_bossek yiff_server yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens, which allows local users to read arbitrary files. NVD-CWE-Other
CVE-2005-3268 2008-09-6 05:53 2005-10-21 Show GitHub Exploit DB Packet Storm
349135 - symantec norton_antivirus Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. NVD-CWE-Other
CVE-2005-3270 2008-09-6 05:53 2005-10-21 Show GitHub Exploit DB Packet Storm
349136 - hp hp-ux The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled w… NVD-CWE-Other
CVE-2005-3277 2008-09-6 05:53 2005-10-22 Show GitHub Exploit DB Packet Storm
349137 - jan_kybic bitmap_viewer Stack-based buffer overflow in the vgasco_printf function in Jan Kybic BitMap Viewer (BMV) 1.2, when compiled with the M_UNIX flag and running setuid, allows local users to gain privileges via a long… NVD-CWE-Other
CVE-2005-3279 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm
349138 - nukefixes nukefixes Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter. NVD-CWE-Other
CVE-2005-3281 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm
349139 - - - Splatt Forum 3.0 to 3.2 allows remote attackers to bypass authentication via unknown vectors. NVD-CWE-Other
CVE-2005-3282 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm
349140 - ahnlab myv3
v3net
v3pro_2004 		Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to… NVD-CWE-Other
CVE-2005-3284 2008-09-6 05:53 2005-10-23 Show GitHub Exploit DB Packet Storm