Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4481 5.3 警告
Network 		Tokuhiro Matsuno (tokuhirom) Amon2::Plugin::Web::CSRFDefender Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性 CWE-338
CWE-340
CVE-2025-15604
CVE-2026-5082 		2026-04-24 11:35 2026-04-8 Show GitHub Exploit DB Packet Storm
4482 7.5 重要
Network 		pyLoad pyLoad pyLoadにおける複数の脆弱性 CWE-502
CWE-863
CVE-2026-33509
CVE-2026-35464 		2026-04-24 11:35 2026-04-7 Show GitHub Exploit DB Packet Storm
4483 9.8 緊急
Network 		Tomas Varaneckas JAD Java Decompiler Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2016-20049 2026-04-24 11:35 2026-03-28 Show GitHub Exploit DB Packet Storm
4484 6.1 警告
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10242 2026-04-24 11:35 2026-04-16 Show GitHub Exploit DB Packet Storm
4485 9.1 緊急
Network 		WSO2 Identity Server as Key Manager
WSO2 API Manager
WSO2 Identity Server
WSO2 Open Banking AM
WSO2 Open Banking IAM 		WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-2374 2026-04-24 11:35 2026-04-16 Show GitHub Exploit DB Packet Storm
4486 5.4 警告
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4867 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
4487 7.5 重要
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-8010 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
4488 5.4 警告
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2025-12624 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
4489 8.2 重要
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2025-31958 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
4490 5.3 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2025-31981 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350231 - ocomon ocomon Cross-site scripting (XSS) vulnerability in OcoMon 1.20, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NVD-CWE-Other
CVE-2005-4663 2008-09-11 04:53 2005-12-31 Show GitHub Exploit DB Packet Storm
350232 - rarlab winrar Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when Wi… NVD-CWE-Other
CVE-2005-3262 2008-09-11 04:46 2005-10-20 Show GitHub Exploit DB Packet Storm
350233 - rarlab winrar Stack-based buffer overflow in UNACEV2.DLL for RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via an ACE archive containing a file with a long name. NVD-CWE-Other
CVE-2005-3263 2008-09-11 04:46 2005-10-20 Show GitHub Exploit DB Packet Storm
350234 - accelerated_enterprise_solutions accelerated_mortgage_manager SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field. NVD-CWE-Other
CVE-2005-3290 2008-09-11 04:46 2005-10-23 Show GitHub Exploit DB Packet Storm
350235 - squid
suse 		squid
suse_linux 		Unspecified vulnerability in Squid on SUSE Linux 9.0 allows remote attackers to cause a denial of service (crash) via HTTPs (SSL). NVD-CWE-Other
CVE-2005-3322 2008-09-11 04:46 2005-10-27 Show GitHub Exploit DB Packet Storm
350236 - sco unixware Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt … NVD-CWE-Other
CVE-2005-2927 2008-09-11 04:44 2005-10-26 Show GitHub Exploit DB Packet Storm
350237 - ibm rational_clearquest Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (X… NVD-CWE-Other
CVE-2005-2994 2008-09-11 04:44 2005-09-21 Show GitHub Exploit DB Packet Storm
350238 - apple mac_os_x
mac_os_x_server 		Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2, as used in applications such as TextEdit, allows external user-assisted attackers to execute arbitrary code via a crafted Microsoft Word file. NVD-CWE-Other
CVE-2005-2502 2008-09-11 04:42 2005-08-19 Show GitHub Exploit DB Packet Storm
350239 - apple mac_os_x
mac_os_x_server 		AppKit for Mac OS X 10.3.9 and 10.4.2 allows attackers with physical access to create local accounts by forcing a particular error to occur at the login window. NVD-CWE-Other
CVE-2005-2503 2008-09-11 04:42 2005-08-19 Show GitHub Exploit DB Packet Storm
350240 - jed_wing chm_lib Buffer overflow in the LZX decompression in CHM Lib (chmlib) 0.35, as used in products such as KchmViewer, has unknown impact and attack vectors. NVD-CWE-Other
CVE-2005-2659 2008-09-11 04:42 2005-11-16 Show GitHub Exploit DB Packet Storm