Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4361 5.3 警告
Network 		jqlang jq jqlangのjqにおける複数の脆弱性 CWE-170
CWE-20
CVE-2026-33948 2026-04-23 10:12 2026-04-14 Show GitHub Exploit DB Packet Storm
4362 4.3 警告
Network 		openwebui open webui openwebuiのopen webuiにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34225 2026-04-23 10:12 2026-04-14 Show GitHub Exploit DB Packet Storm
4363 7.7 重要
Network 		Weblate Weblate Weblateにおける複数の脆弱性 CWE-200
CWE-22
CWE-59
CVE-2026-34242 2026-04-23 10:12 2026-04-15 Show GitHub Exploit DB Packet Storm
4364 5 警告
Network 		Weblate Weblate Weblateにおける複数の脆弱性 CWE-200
CWE-918
CVE-2026-34244 2026-04-23 10:12 2026-04-15 Show GitHub Exploit DB Packet Storm
4365 8.8 重要
Network 		Weblate Weblate Weblateにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-34393 2026-04-23 10:12 2026-04-15 Show GitHub Exploit DB Packet Storm
4366 6.5 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-34985 2026-04-23 10:12 2026-04-8 Show GitHub Exploit DB Packet Storm
4367 6.5 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-35165 2026-04-23 10:12 2026-04-8 Show GitHub Exploit DB Packet Storm
4368 5.4 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)における複数の脆弱性 CWE-552
CWE-79
CWE-79
CVE-2026-35169 2026-04-23 10:12 2026-04-8 Show GitHub Exploit DB Packet Storm
4369 4.3 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-35400 2026-04-23 10:12 2026-04-8 Show GitHub Exploit DB Packet Storm
4370 5.4 警告
Network 		McGill University LORIS (Longitudinal Online Research and Imaging System) McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35403 2026-04-23 10:12 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348851 - web4future keyword_frequency_counter Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL." NVD-CWE-Other
CVE-2005-4036 2011-03-8 11:27 2005-12-6 Show GitHub Exploit DB Packet Storm
348852 - mr._cgi_guy hot_links_pro
hot_links_sql 		Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string. NVD-CWE-Other
CVE-2005-4041 2011-03-8 11:27 2005-12-6 Show GitHub Exploit DB Packet Storm
348853 - mr._cgi_guy warm_links Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi. NVD-CWE-Other
CVE-2005-4042 2011-03-8 11:27 2005-12-6 Show GitHub Exploit DB Packet Storm
348854 - sun java_system_application_server
one_application_server 		Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Serv… NVD-CWE-Other
CVE-2005-4046 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348855 - iisworks aspknowledgebase Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter. NVD-CWE-Other
CVE-2005-4047 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348856 - pluggedout pluggedout_blog SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (… NVD-CWE-Other
CVE-2005-4054 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348857 - jonathan_beckett pluggedout_nexus SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters. NVD-CWE-Other
CVE-2005-4056 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348858 - jonathan_beckett pluggedout_nexus Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name p… NVD-CWE-Other
CVE-2005-4057 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348859 - locazo locazolist SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter. NVD-CWE-Other
CVE-2005-4059 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm
348860 - - - Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters. NVD-CWE-Other
CVE-2005-4061 2011-03-8 11:27 2005-12-7 Show GitHub Exploit DB Packet Storm