Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3891 2.8 低
Local 		インテル Intel Graphics Software
インテル グラフィックス・ドライバー
Linux Intel LTS Kernel 		インテルのインテル グラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2025-32739 2026-04-21 10:43 2026-02-10 Show GitHub Exploit DB Packet Storm
3892 9.1 緊急
Network 		Grafana Labs Grafana Pyroscope Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2025-41118 2026-04-21 10:43 2026-04-15 Show GitHub Exploit DB Packet Storm
3893 6.1 警告
Network 		Hind Leaflet Leafletにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-69993 2026-04-21 10:43 2026-04-14 Show GitHub Exploit DB Packet Storm
3894 8.8 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-23776 2026-04-21 10:43 2026-04-17 Show GitHub Exploit DB Packet Storm
3895 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-23778 2026-04-21 10:42 2026-04-17 Show GitHub Exploit DB Packet Storm
3896 6.7 警告
Local 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-23779 2026-04-21 10:42 2026-04-17 Show GitHub Exploit DB Packet Storm
3897 4.3 警告
Network 		Apache Software Foundation Apache ActiveMQ
ActiveMQ Web
ActiveMQ Broker 		Apache Software FoundationのApache ActiveMQ等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33227 2026-04-21 10:42 2026-04-7 Show GitHub Exploit DB Packet Storm
3898 7.3 重要
Local 		BeeWare Briefcase BeeWareのBriefcaseにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-33430 2026-04-21 10:42 2026-03-26 Show GitHub Exploit DB Packet Storm
3899 7.8 重要
Local 		マイクロソフト Microsoft Defender Antimalware Platform Microsoft Defender の特権の昇格の脆弱性 CWE-1220
アクセス制御の不十分な粒度 		CVE-2026-33825 2026-04-21 10:42 2026-04-14 Show GitHub Exploit DB Packet Storm
3900 7.8 重要
Local 		linkingvision RapidVMS linkingvisionのRapidVMSにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-33847 2026-04-21 10:42 2026-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348071 - weaverslave netzbrett SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the p_entry parameter in an entry command to index.php. NVD-CWE-Other
CVE-2005-3874 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348072 - enterprise_heart enterprise_connector Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in (1) send.php or (2) a delete a… NVD-CWE-Other
CVE-2005-3875 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348073 - td-systems adc2000_ng_pro
adc2000_ng_pro_lite 		Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the (1) cat and (2) lang paramete… NVD-CWE-Other
CVE-2005-3876 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348074 - alex_king php_doc_system Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. (dot dot) in the show parameter. NVD-CWE-Other
CVE-2005-3878 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348075 - omnistar_interactive omnistar_kbase Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_… NVD-CWE-Other
CVE-2005-3880 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348076 - faqsystems faqring_knowledge_base_software SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2005-3882 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
348077 - - - Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certa… NVD-CWE-Other
CVE-2005-3886 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
348078 - - - Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or cra… NVD-CWE-Other
CVE-2005-3900 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
348079 - amazon_shop amazon_shop Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query paramete… CWE-79
Cross-site Scripting 		CVE-2005-3908 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
348080 - bosdev bosdates Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters. NVD-CWE-Other
CVE-2005-3911 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm