Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3811 9.8 緊急
Network 		JetBrains Junie JetBrainsのJunieにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-41153 2026-04-30 12:27 2026-04-17 Show GitHub Exploit DB Packet Storm
3812 8.1 重要
Network 		Statamic Statamic Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性 CWE-470
クラスまたはコードを選択する外部から制御された入力の使用 		CVE-2026-41175 2026-04-30 12:27 2026-04-22 Show GitHub Exploit DB Packet Storm
3813 9.8 緊急
Network 		Rclone Rclone Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-41176 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3814 9.8 緊急
Network 		Rclone Rclone Rcloneにおける複数の脆弱性 CWE-306
CWE-78
CVE-2026-41179 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3815 9.9 緊急
Network 		Froxlor Froxlor FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2026-41228 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3816 9.1 緊急
Network 		Froxlor Froxlor Froxlorにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41229 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3817 8.5 重要
Network 		Froxlor Froxlor FroxlorにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-41230 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3818 7.5 重要
Network 		Froxlor Froxlor Froxlorにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-41231 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3819 5 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41232 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
3820 5.4 警告
Network 		Froxlor Froxlor Froxlorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41233 2026-04-30 12:27 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346261 - xerver xerver Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI. NVD-CWE-Other
CVE-2005-4774 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346262 - xerver xerver This vulnerability is addressed in the following product release: Xerver, Xerver, 4.20 NVD-CWE-Other
CVE-2005-4774 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346263 - jl_webworks quickblogger Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section. NVD-CWE-Other
CVE-2005-4785 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346264 - hauri hauri_livecall
virobot
vrazmain.dll 		Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products including (1) ViRobot Expert 4.0, (2) ViRobot Advanced Server, and (3) HAURI LiveC… NVD-CWE-Other
CVE-2005-4786 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346265 - cisco application_and_content_networking_software
ata
subscriber_edge_services_manager
ip_phone_7902
ip_phone_7905
ip_phone_7912
unity_express 		Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows remote attackers to cause a denial of service (crash or instability) via a compres… NVD-CWE-Other
CVE-2005-4794 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346266 - cisco application_and_content_networking_software
ata
subscriber_edge_services_manager
ip_phone_7902
ip_phone_7905
ip_phone_7912
unity_express 		Cisco has released advisory cisco-sn-20050524-dns to address this issue. Please see the referenced advisory for further information on obtaining fixes. NVD-CWE-Other
CVE-2005-4794 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346267 - yapig yapig Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Homepage field… NVD-CWE-Other
CVE-2005-4799 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346268 - yapig yapig Successful exploitation requires that "register_globals" is enabled. NVD-CWE-Other
CVE-2005-4799 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346269 - yapig yapig Direct static code injection vulnerability in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery param… NVD-CWE-Other
CVE-2005-4800 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm
346270 - yapig yapig Multiple cross-site request forgery (CSRF) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as de… NVD-CWE-Other
CVE-2005-4801 2017-07-20 10:29 2005-12-31 Show GitHub Exploit DB Packet Storm