Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4041 9.8 緊急
Network 		Phpscriptsmall Advance Gift Shop Pro Script PhpscriptsmallのAdvance Gift Shop Pro ScriptにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2019-25680 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
4042 9.8 緊急
Network 		WISDOM Pegasus CMS WISDOMのPegasus CMSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2019-25687 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
4043 8.8 重要
Network 		Nextcloud
windmill project		 windmill
Nextcloud Flow 		Nextcloud等の複数ベンダの製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-22683 2026-04-27 11:18 2026-04-7 Show GitHub Exploit DB Packet Storm
4044 7.5 重要
Network 		XiangShan NEMU XiangShanのNEMUにおける複数の脆弱性 CWE-1287
CWE-131
CVE-2026-29645 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
4045 9.8 緊急
Network 		XiangShan NEMU XiangShanのNEMUにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-29649 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
4046 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-125
CWE-193
CVE-2026-32605 2026-04-27 11:18 2026-04-13 Show GitHub Exploit DB Packet Storm
4047 9.6 緊急
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-1284
CWE-190
CWE-20
CWE-345
CVE-2026-33471 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
4048 9.8 緊急
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-33608 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
4049 6.5 警告
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative ServerにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-33609 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
4050 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-33610 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347371 - covide_groupware-crm covide SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. NVD-CWE-Other
CVE-2005-2164 2016-10-18 12:25 2005-07-6 Show GitHub Exploit DB Packet Storm
347372 - probe.cgi probe.cgi probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any. NVD-CWE-Other
CVE-2005-2178 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347373 - jaws jaws PHP remote file inclusion vulnerability in BlogModel.php in Jaws 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via the path parameter. NVD-CWE-Other
CVE-2005-2179 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347374 - gnu gnats gen-index in GNATS 4.0, 4.1.0, and possibly earlier versions, when installed setuid, does not properly check files passed to the -o argument and opens the file with write access, which allows local u… NVD-CWE-Other
CVE-2005-2180 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347375 - phpxmail phpxmail class.xmail.php in PhpXmail 0.7 through 1.1 does not properly handle large passwords, which prevents an error message from being returned and allows remote attackers to bypass authentication and gain… NVD-CWE-Other
CVE-2005-2183 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347376 - emc eroom eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file. NVD-CWE-Other
CVE-2005-2184 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347377 - emc eroom eRoom does not set an expiration for Cookies, which allows remote attackers to capture cookies and conduct replay attacks. NVD-CWE-Other
CVE-2005-2185 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347378 - mcafee intrushield_security_management_system Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName … NVD-CWE-Other
CVE-2005-2186 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347379 - mcafee intrushield_security_management_system McAfee IntruShield Security Management System allows remote authenticated users to access the "Generate Reports" feature and modify alerts by setting the Access option to true, as demonstrated using … NVD-CWE-Other
CVE-2005-2187 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm
347380 - mcafee intrushield_security_management_system McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack. NVD-CWE-Other
CVE-2005-2188 2016-10-18 12:25 2005-07-11 Show GitHub Exploit DB Packet Storm