Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3911	9.1	緊急 Network	サムスン	escargot	サムスンのescargotにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-25209	2026-04-30 12:16	2026-04-13	Show	GitHub Exploit DB Packet Storm

3912	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25908	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

3913	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26942	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3914	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-26943	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3915	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-26951	2026-04-30 12:16	2026-04-20	Show	GitHub Exploit DB Packet Storm

3916	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-27172	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

3917	7.8	重要 Local	ggml.ai	llama.cpp	ggml.aiのllama.cppにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-27940	2026-04-30 12:16	2026-03-12	Show	GitHub Exploit DB Packet Storm

3918	9.8	緊急 Network	OpenPLC Project	OpenPLC_v3 ファームウェア	OpenPLC ProjectのOpenPLC_v3 ファームウェアにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2026-28205	2026-04-30 12:16	2026-04-9	Show	GitHub Exploit DB Packet Storm

3919	4.3	警告 Network	Rocket.Chat	Rocket.Chat	Rocket.Chatにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-29197	2026-04-30 12:16	2026-04-24	Show	GitHub Exploit DB Packet Storm

3920	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	AC18 ファームウェア	Shenzhen Tenda Technology Co.,Ltd.のAC18 ファームウェアにおけるコマンドインジェクションの脆弱性	CWE-77 CWE-77	CVE-2026-31255	2026-04-30 12:16	2026-04-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346521	-	microsoft	windows_xp	By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer.	NVD-CWE-Other	CVE-2005-3595	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

346522	-	iisworks	aspknowledgebase	SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.	NVD-CWE-Other	CVE-2005-3596	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

346523	-	sap	sap_web_application_server	HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.	NVD-CWE-Other	CVE-2005-3633	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346524	-	sap	sap_web_application_server	frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-…	NVD-CWE-Other	CVE-2005-3634	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346525	-	sap	sap_web_application_server	Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-s…	NVD-CWE-Other	CVE-2005-3635	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346526	-	sap	sap_web_application_server	Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.	NVD-CWE-Other	CVE-2005-3636	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346527	-	floosietek	ftgate	Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonst…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-3640	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346528	-	phpadsnew phppgads	phpadsnew phppgads	phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, a…	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346529	-	phpadsnew phppgads	phpadsnew phppgads	Upgrade to phpAdsNew version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=11386 Upgrade to phpPgAds version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=36679 …	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346530	-	phpadsnew phppgads	phpadsnew phppgads	Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID…	CWE-89 SQL Injection	CVE-2005-3646	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm