Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4281 5.5 警告
Local
International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-34554 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4282 6.2 警告
Local
International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-34555 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4283 5.5 警告
Local
International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-34556 2026-04-21 10:47 2026-03-31 Show GitHub Exploit DB Packet Storm
4284 9.1 緊急
Network
Vikunja Vikunja Vikunjaにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-34727 2026-04-21 10:47 2026-04-10 Show GitHub Exploit DB Packet Storm
4285 5.4 警告
Network
vLLM vLLM vLLMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-34753 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
4286 6.5 警告
Network
vLLM vLLM vLLMにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-34755 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
4287 6.5 警告
Network
vLLM vLLM vLLMにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-34756 2026-04-21 10:47 2026-04-6 Show GitHub Exploit DB Packet Storm
4288 8.8 重要
Network
Electron electron Electronのelectronにおける誤った領域へのリソースの漏えいに関する脆弱性 CWE-668
誤った領域へのリソースの漏えい
CVE-2026-34765 2026-04-21 10:47 2026-04-7 Show GitHub Exploit DB Packet Storm
4289 5.4 警告
Network
Electron electron Electronのelectronにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-34777 2026-04-21 10:47 2026-04-4 Show GitHub Exploit DB Packet Storm
4290 6.5 警告
Network
Electron electron Electronのelectronにおける複数の脆弱性 CWE-290
CWE-345
CVE-2026-34778 2026-04-21 10:47 2026-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351181 - gnu mailutils Buffer overflow in the header_get_field_name function in header.c for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a crafted e-ma… NVD-CWE-Other
CVE-2005-1520 2008-09-6 05:49 2005-05-26 Show GitHub Exploit DB Packet Storm
351182 - gnu mailutils Integer overflow in the fetch_io function of the imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via a partial message … NVD-CWE-Other
CVE-2005-1521 2008-09-6 05:49 2005-05-26 Show GitHub Exploit DB Packet Storm
351183 - gnu mailutils The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service (CPU consumption) via a large range value in the FETC… NVD-CWE-Other
CVE-2005-1522 2008-09-6 05:49 2005-05-26 Show GitHub Exploit DB Packet Storm
351184 - gnu mailutils Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the comm… NVD-CWE-Other
CVE-2005-1523 2008-09-6 05:49 2005-05-26 Show GitHub Exploit DB Packet Storm
351185 - battleaxe_software bttlxeforum forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability. NVD-CWE-Other
CVE-2005-1570 2008-09-6 05:49 2005-05-14 Show GitHub Exploit DB Packet Storm
351186 - wenig_and_spitzer-williams showoff_digital_media_software Multiple directory traversal vulnerabilities in ShowOff! 1.5.4 allow remote attackers to read arbitrary files via ".." sequences in arguments to the (1) ShowAlbum, (2) ShowVideo, or (3) ShowGraphic s… NVD-CWE-Other
CVE-2005-1571 2008-09-6 05:49 2005-05-14 Show GitHub Exploit DB Packet Storm
351187 - wenig_and_spitzer-williams showoff_digital_media_software ShowOff! 1.5.4 allows remote attackers to cause a denial of service (server crash) via a malformed request to port 8083. NVD-CWE-Other
CVE-2005-1572 2008-09-6 05:49 2005-05-11 Show GitHub Exploit DB Packet Storm
351188 - mozilla firefox The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows allows remote attackers to hide the real file types of downloaded files via the Content-Type HTTP header and a filename containi… NVD-CWE-Other
CVE-2005-1575 2008-09-6 05:49 2005-05-14 Show GitHub Exploit DB Packet Storm
351189 - mozilla firefox The file download dialog in Mozilla Firefox 0.10.1 and 1.0 for Windows uses the Content-Type HTTP header to determine the file type, but saves the original file extension when "Save to Disk" is selec… NVD-CWE-Other
CVE-2005-1576 2008-09-6 05:49 2005-05-12 Show GitHub Exploit DB Packet Storm
351190 - apg_technology classmaster APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share. NVD-CWE-Other
CVE-2005-1577 2008-09-6 05:49 2005-05-14 Show GitHub Exploit DB Packet Storm