Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4481	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	リモートアクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-26183	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4482	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Projected File System の特権の昇格の脆弱性	CWE-126 バッファオーバーリード	CVE-2026-26184	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4483	4.4	警告 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 22h2 Microsoft Windows 10 21h2 Microsoft Windows&…	Windows Hello のセキュリティ機能のバイパスの脆弱性	CWE-20 不適切な入力確認	CVE-2026-27906	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4484	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-30997	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4485	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-30998	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4486	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-30999	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4487	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性	CWE-284 CWE-94	CVE-2026-31018	2026-04-27 11:23	2026-04-21	Show	GitHub Exploit DB Packet Storm

4488	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-31019	2026-04-27 11:22	2026-04-21	Show	GitHub Exploit DB Packet Storm

4489	3.5	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-3254	2026-04-27 11:22	2026-04-22	Show	GitHub Exploit DB Packet Storm

4490	9.9	緊急 Network	Linux Foundation	Spinnaker	Linux FoundationのSpinnakerにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32604	2026-04-27 11:22	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354351	-	horde	mnemo	Cross-site scripting (XSS) vulnerability in Horde Mnemo Note Manager before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.	NVD-CWE-Other	CVE-2005-1320	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

354352	-	horde	vaction	Cross-site scripting (XSS) vulnerability in Horde Vacation module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.	NVD-CWE-Other	CVE-2005-1321	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

354353	-	horde	nag	Cross-site scripting (XSS) vulnerability in Horde Nag Task List Manager before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.	NVD-CWE-Other	CVE-2005-1322	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

354354	-	voodoo_circle	voodoo_circle	Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet.	NVD-CWE-Other	CVE-2005-1326	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

354355	-	woltlab	burning_board	Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter.	NVD-CWE-Other	CVE-2005-1327	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

354356	-	apple	mac_os_x mac_os_x_server	AppKit in Mac OS X 10.3.9 allows attackers to cause a denial of service (Cocoa application crash) via a malformed TIFF image that causes the NXSeek to use an incorrect offset, leading to an unhandled…	CWE-20 Improper Input Validation	CVE-2005-1330	2008-09-6 05:48	2005-05-4	Show	GitHub Exploit DB Packet Storm

354357	-	apple	mac_os_x mac_os_x_server	Bluetooth-enabled systems in Mac OS X 10.3.9 enables the Bluetooth file exchange service by default, which allows remote attackers to access files without the user being notified, and local users to …	NVD-CWE-Other	CVE-2005-1332	2008-09-6 05:48	2005-05-4	Show	GitHub Exploit DB Packet Storm

354358	-	apple	mac_os_x	Directory traversal vulnerability in the Bluetooth file and object exchange (OBEX) services in Mac OS X 10.3.9 allows remote attackers to read arbitrary files.	NVD-CWE-Other	CVE-2005-1333	2008-09-6 05:48	2005-05-4	Show	GitHub Exploit DB Packet Storm

354359	-	apple	mac_os_x mac_os_x_server	Unknown vulnerability in Mac OS X 10.3.9 allows local users to gain privileges via (1) chfn, (2) chpass, and (3) chsh, which "use external helper programs in an insecure manner."	NVD-CWE-Other	CVE-2005-1335	2008-09-6 05:48	2005-05-4	Show	GitHub Exploit DB Packet Storm

354360	-	apple	mac_os_x	Buffer overflow in the Foundation framework for Mac OS X 10.3.9 allows local users to execute arbitrary code via a long environment variable.	NVD-CWE-Other	CVE-2005-1336	2008-09-6 05:48	2005-05-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed