Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
421 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7481 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
422 5.5 警告
Local 		GPAC GPAC GPACにおける複数の脆弱性 New CWE-400
CWE-770
CVE-2026-8124 2026-05-18 12:09 2026-05-8 Show GitHub Exploit DB Packet Storm
423 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如 		CVE-2026-8144 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
424 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-8280 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
425 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 New CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8291 2026-05-18 12:09 2026-05-11 Show GitHub Exploit DB Packet Storm
426 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 New CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8292 2026-05-18 12:09 2026-05-11 Show GitHub Exploit DB Packet Storm
427 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-8390 2026-05-18 12:09 2026-05-12 Show GitHub Exploit DB Packet Storm
428 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2025-12669 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
429 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2025-13874 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
430 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける入力で指定された数量の不適切な検証に関する脆弱性 New CWE-1284
入力で指定された数量の不適切な検証 		CVE-2025-14869 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346161 - tritanium_scripts tritanium_bulletin_board index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters. NVD-CWE-Other
CVE-2003-1162 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346162 - ganglia gmond hash.c in Ganglia gmond 2.5.3 allows remote attackers to cause a denial of service (segmentation fault) via a UDP packet that contains a single-byte name string, which is used as an out-of-bounds arr… NVD-CWE-Other
CVE-2003-1163 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346163 - mldonkey mldonkey Cross-site scripting (XSS) vulnerability in Mldonkey 2.5-4 allows remote attackers to inject arbitrary web script or HTML via the URI, which is injected into the HTML error page. NVD-CWE-Other
CVE-2003-1164 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346164 - brs webweaver Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with a long User-Agent header. NVD-CWE-Other
CVE-2003-1165 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346165 - http_commander http_commander Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter. NVD-CWE-Other
CVE-2003-1166 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346166 - gernot_stocker kpopup misc.cpp in KPopup 0.9.1 trusts the PATH variable when executing killall, which allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program. NVD-CWE-Other
CVE-2003-1167 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346167 - datev nutzungskontrolle DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV key… NVD-CWE-Other
CVE-2003-1169 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346168 - mod_security mod_security Heap-based buffer overflow in the sec_filter_out function in mod_security 1.7RC1 through 1.7.1 in Apache 2 allows remote attackers to execute arbitrary code via a server side script that sends a larg… NVD-CWE-Other
CVE-2003-1171 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346169 - apache cocoon Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename … NVD-CWE-Other
CVE-2003-1172 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
346170 - - - Centrinity FirstClass 7.1 allows remote attackers to access sensitive information by appending search to the end of the URL and checking all of the search option checkboxes and leaving the text field… NVD-CWE-Other
CVE-2003-1173 2017-07-11 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm