Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3821	7.5	重要 Network	Web Technologies	Change Detection	Web TechnologiesのChange DetectionにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-41895	2026-05-15 11:00	2026-05-12	Show	GitHub Exploit DB Packet Storm

3822	9.8	緊急 Network	レッドハット GNU Project	Red Hat OpenShift Container Platform Red Hat Hardened Images GnuTLS Red Hat Enterprise Linux	GNU Project等の複数ベンダの製品におけるNull バイト相互作用エラー (Poison Null Byte) の脆弱性	CWE-626 Null バイト相互作用エラー (Poison Null Byte)	CVE-2026-42010	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

3823	9.6	緊急 Network	langflow	langflow	langflowにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42048	2026-05-15 11:00	2026-05-12	Show	GitHub Exploit DB Packet Storm

3824	5.5	警告 Local	ImageMagick	ImageMagick	ImageMagickにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-42050	2026-05-15 11:00	2026-05-11	Show	GitHub Exploit DB Packet Storm

3825	8.1	重要 Network		-	OpenC3のOpenC3 COSMOSにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-42088	2026-05-15 11:00	2026-05-4	Show	GitHub Exploit DB Packet Storm

3826	8.8	重要 Network	litellm	litellm	LiteLLMにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-42203	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

3827	9.1	緊急 Network	axios project	axios	axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42264	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

3828	5.7	警告 Network	Kimai project	kimai	Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性	CWE-1236 CSV ファイル内の数式要素の不適切な中和	CVE-2026-42267	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

3829	7.5	重要 Network	The Go Project	Go	The Go ProjectのGoにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-42499	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

3830	7.5	重要 Network	The Go Project	Go	The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-42501	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
358411	-	fallback-reboot	fallback-reboot	The daemon for fallback-reboot before 0.995 allows attackers to cause a denial of service (daemon exit), possibly related to verbose debug messages when the daemon is not on a tty.	NVD-CWE-Other	CVE-2005-0510	2008-09-6 05:46	2005-03-14	Show	GitHub Exploit DB Packet Storm

358412	-	mambo	mambo	PHP remote file inclusion vulnerability in Tar.php in Mambo 4.5.2 allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remo…	NVD-CWE-Other	CVE-2005-0512	2008-09-6 05:46	2005-02-21	Show	GitHub Exploit DB Packet Storm

358413	-	verity	verity_ultraseek	Cross-site scripting (XSS) vulnerability in Verity Ultraseek before 5.3.3 allows remote attackers to inject arbitrary HTML and web script via search parameters.	NVD-CWE-Other	CVE-2005-0514	2008-09-6 05:46	2005-02-22	Show	GitHub Exploit DB Packet Storm

358414	-	webroot_software	my_firewall_plus	Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary f…	NVD-CWE-Other	CVE-2005-0515	2008-09-6 05:46	2005-05-18	Show	GitHub Exploit DB Packet Storm

358415	-	peerftp_5	peerftp_5	PeerFTP_5 stores sensitive information such as passwords in plaintext in the PeerFTP.ini files, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2005-0517	2008-09-6 05:46	2005-02-23	Show	GitHub Exploit DB Packet Storm

358416	-	exeem	exeem	eXeem 0.21 stores sensitive information such as passwords in plaintext in the Exeem registry key, which allows local users to gain privileges via the proxy_user and proxy_password values.	NVD-CWE-Other	CVE-2005-0518	2008-09-6 05:46	2005-02-23	Show	GitHub Exploit DB Packet Storm

358417	-	-	-	SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2005-0521	2008-09-6 05:46	2005-02-23	Show	GitHub Exploit DB Packet Storm

358418	-	lionmax_software	chat_anywhere	Chat Anywhere 2.72a stores sensitive information such as passwords in plaintext in the .INI file for a chatroom, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2005-0522	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

358419	-	prozilla	prozilla_download_accelerator	Format string vulnerability in ProZilla 1.3.7.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the Location header.	NVD-CWE-Other	CVE-2005-0523	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

358420	-	trend_micro	client-server-messaging_suite_smb client-server_suite_smb control_manager interscan_emanager interscan_messaging_security_suite interscan_viruswall interscan_web_security_suite i…	Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with…	NVD-CWE-Other	CVE-2005-0533	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed