Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4281 7.8 重要
Local 		Rapid7 Insight Agent Rapid7のInsight Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-6482 2026-04-30 10:57 2026-04-17 Show GitHub Exploit DB Packet Storm
4282 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6785 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4283 8.1 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox 		Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-125
CWE-416
CWE-787
CVE-2026-6786 2026-04-30 10:57 2026-04-26 Show GitHub Exploit DB Packet Storm
4284 7.8 重要
Local 		IObit Malware Fighter IObitのMalware Fighterにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2016-20059 2026-04-28 10:14 2026-04-4 Show GitHub Exploit DB Packet Storm
4285 6.3 警告
Network 		Apache Software Foundation Apache DolphinScheduler Apache Software FoundationのApache DolphinSchedulerにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62233 2026-04-28 10:14 2026-04-24 Show GitHub Exploit DB Packet Storm
4286 2.9 低
Local 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-22007 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4287 5.3 警告
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-22013 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4288 7.5 重要
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における複数の脆弱性 CWE-200
CWE-502
CVE-2026-22016 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4289 3.7 低
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-22018 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
4290 5.3 警告
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22021 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346911 - e-post_corporation spa-pro_mail_atsolomon Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' mail and perform operations on arbitrary directories via ..… NVD-CWE-Other
CVE-2005-1902 2017-07-11 10:32 2005-06-9 Show GitHub Exploit DB Packet Storm
346912 - - - Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command. NVD-CWE-Other
CVE-2005-1903 2017-07-11 10:32 2005-06-2 Show GitHub Exploit DB Packet Storm
346913 - linux linux_kernel The Linux kernel 2.6 before 2.6.12.1 allows local users to cause a denial of service (kernel panic) via a non group-leader thread executing a different program than was pending in itimer, which cause… NVD-CWE-Other
CVE-2005-1913 2017-07-11 10:32 2005-09-15 Show GitHub Exploit DB Packet Storm
346914 - tiki tikiwiki_cms\/groupware Multiple directory traversal vulnerabilities in Tikiwiki before 1.9.1 allow remote attackers to read arbitrary files and execute commands via (1) the suck_url parameter to tiki-editpage.php or (2) la… CWE-22
Path Traversal 		CVE-2005-1925 2017-07-11 10:32 2005-11-18 Show GitHub Exploit DB Packet Storm
346915 - microsoft windows_2000
windows_2003_server
windows_nt
windows_xp 		Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to… NVD-CWE-Other
CVE-2005-1935 2017-07-11 10:32 2005-06-13 Show GitHub Exploit DB Packet Storm
346916 - ipswitch whatsup_small_business Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022). NVD-CWE-Other
CVE-2005-1939 2017-07-11 10:32 2005-12-31 Show GitHub Exploit DB Packet Storm
346917 - cisco catalyst Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages. NVD-CWE-Other
CVE-2005-1942 2017-07-11 10:32 2005-06-10 Show GitHub Exploit DB Packet Storm
346918 - xerox document_centre_220
document_centre_230
document_centre_240
document_centre_255
document_centre_265
document_centre_332
document_centre_340
document_centre_420
document_centre… 		Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to "gain unauthorized … NVD-CWE-Other
CVE-2005-1936 2017-07-11 10:32 2005-06-13 Show GitHub Exploit DB Packet Storm
346919 - glen_campbell siteframe PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter. CWE-94
Code Injection 		CVE-2005-1965 2017-07-11 10:32 2005-06-16 Show GitHub Exploit DB Packet Storm
346920 - finjan_software surfingate Finjan SurfinGate 7.0SP2 and SP3 allows remote attackers to download blocked files via hex-encoded characters in a filename, as demonstrated using "%2e". NVD-CWE-Other
CVE-2005-1994 2017-07-11 10:32 2005-06-14 Show GitHub Exploit DB Packet Storm