Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3731 4.9 警告
Network 		xibosignage xibo xibosignageのxiboにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-31955 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3732 4.3 警告
Network 		xibosignage xibo xibosignageのxiboにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-31956 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3733 8.8 重要
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-32171 2026-04-30 12:31 2026-04-14 Show GitHub Exploit DB Packet Storm
3734 7.5 重要
Network 		getkirby kirby getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-32870 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3735 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33076 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3736 7.5 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33077 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3737 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33078 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3738 8.8 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33208 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3739 7.5 重要
Network 		PowerDNS dnsdist PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33254 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
3740 7.5 重要
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33256 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346221 - alstrasoft epay Directory traversal vulnerability in index.php in Alstrasoft Epay Pro 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter. NVD-CWE-Other
CVE-2005-3026 2017-07-11 10:33 2005-09-22 Show GitHub Exploit DB Packet Storm
346222 - sybari antigen Sybari Antigen 8.0 SR2 does not properly filter SMTP messages, which allows remote attackers to bypass custom filter rules and send file attachments of arbitrary file types via a message with a subje… NVD-CWE-Other
CVE-2005-3027 2017-07-11 10:33 2005-09-22 Show GitHub Exploit DB Packet Storm
346223 - mall23 mall23 SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter. NVD-CWE-Other
CVE-2005-3043 2017-07-11 10:33 2005-09-22 Show GitHub Exploit DB Packet Storm
346224 - phpmyfaq phpmyfaq PhpMyFaq 1.5.1 stores data files under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain sensitive information via a direct req… NVD-CWE-Other
CVE-2005-3049 2017-07-11 10:33 2005-09-24 Show GitHub Exploit DB Packet Storm
346225 - igor_pavlov 7-zip Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code vi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-3051 2017-07-11 10:33 2005-09-24 Show GitHub Exploit DB Packet Storm
346226 - fortinet fortios
fortigate 		The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote attackers to bypass the Fortinet FTP anti-virus engine by sending a STOR comman… NVD-CWE-noinfo
CVE-2005-3057 2017-07-11 10:33 2005-12-31 Show GitHub Exploit DB Packet Storm
346227 - ibm aix Buffer overflow in getconf in IBM AIX 5.2 to 5.3 allows local users to execute arbitrary code via unknown vectors. NVD-CWE-Other
CVE-2005-3060 2017-07-11 10:33 2005-10-1 Show GitHub Exploit DB Packet Storm
346228 - interchange_development_group interchange SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-3072 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
346229 - interchange_development_group interchange Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allow… NVD-CWE-Other
CVE-2005-3073 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
346230 - - - SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie. NVD-CWE-Other
CVE-2005-3082 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm