Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3801 5.4 警告
Network 		PHPGurukul Employee Leaves Management System (ELMS) PHPGurukulのEmployee Leaves Management System (ELMS)におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-67315 2026-02-2 19:40 2026-01-5 Show GitHub Exploit DB Packet Storm
3802 5.4 警告
Network 		heytap internet browser heytapのinternet browserにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-67316 2026-02-2 19:40 2026-01-5 Show GitHub Exploit DB Packet Storm
3803 9.8 緊急
Network 		webkul qloapps webkulのqloappsにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-67325 2026-02-2 19:40 2026-01-8 Show GitHub Exploit DB Packet Storm
3804 8.8 重要
Network 		b3log SiYuan B3logのSiYuanにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2025-67488 2026-02-2 19:40 2025-12-9 Show GitHub Exploit DB Packet Storm
3805 9 緊急
Network 		Homarr Homarr Homarrにおける複数の脆弱性 CWE-20
CWE-90
CVE-2025-67493 2026-02-2 19:39 2025-12-17 Show GitHub Exploit DB Packet Storm
3806 5.3 警告
Network 		Discourse Discourse Discourseにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2025-68479 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3807 5.4 警告
Network 		HasThemes WC Builder HasThemesのWordPress用WC Builderにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-68533 2026-02-2 19:39 2025-12-24 Show GitHub Exploit DB Packet Storm
3808 5.3 警告
Network 		Discourse Discourse Discourseにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-68659 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3809 5.4 警告
Network 		Discourse Discourse Discourseにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-68660 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
3810 9.9 緊急
Network 		Discourse Discourse Discourseにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2025-68662 2026-02-2 19:39 2026-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349351 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneous print jobs, which allows remote attackers to cause a denial of service (printing halt). NVD-CWE-Other
CVE-2005-2525 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
349352 - easy_software_products
apple 		cups
mac_os_x 		CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by sending a partial IPP request and closing the connection. NVD-CWE-Other
CVE-2005-2526 2008-09-6 05:51 2005-08-19 Show GitHub Exploit DB Packet Storm
349353 - maxwebportal maxwebportal SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter. NVD-CWE-Other
CVE-2005-1779 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
349354 - mailenable mailenable_enterprise
mailenable_professional 		Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash). NVD-CWE-Other
CVE-2005-1781 2008-09-6 05:50 2005-05-31 Show GitHub Exploit DB Packet Storm
349355 - w.m.r._simpson bookreview Multiple cross-site scripting (XSS) vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to (1) add_review.htm, (2) suggest_revi… NVD-CWE-Other
CVE-2005-1782 2008-09-6 05:50 2005-05-26 Show GitHub Exploit DB Packet Storm
349356 - hosting_controller hosting_controller Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp. NVD-CWE-Other
CVE-2005-1784 2008-09-6 05:50 2005-05-27 Show GitHub Exploit DB Packet Storm
349357 - hosting_controller hosting_controller SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter. NVD-CWE-Other
CVE-2005-1788 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
349358 - india_software_solution shopping_cart SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password. NVD-CWE-Other
CVE-2005-1789 2008-09-6 05:50 2005-05-29 Show GitHub Exploit DB Packet Storm
349359 - microsoft windows_xp Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can b… NVD-CWE-Other
CVE-2005-1792 2008-09-6 05:50 2005-06-1 Show GitHub Exploit DB Packet Storm
349360 - openssl openssl The design of Advanced Encryption Standard (AES), aka Rijndael, allows remote attackers to recover AES keys via timing attacks on S-box lookups, which are difficult to perform in constant time in AES… NVD-CWE-Other
CVE-2005-1797 2008-09-6 05:50 2005-05-26 Show GitHub Exploit DB Packet Storm