Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4491	6.1	警告 Network	WSO2	WSO2 API Manager WSO2 Identity Server	WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-6024	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4492	6.5	警告 Network	フォーティネット	FortiOS FortiPAM FortiProxy FortiSwitch Manager	フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-61624	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

4493	5.4	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-61886	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

4494	5.3	警告 Network	Apache Software Foundation	Apache Doris-MCP-Server	Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-66335	2026-04-24 11:34	2026-04-20	Show	GitHub Exploit DB Packet Storm

4495	6.5	警告 Network	フォーティネット	FortiManager Cloud FortiAnalyzer FortiAnalyzer Cloud FortiManager	フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-68649	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

4496	8.4	重要 Local	Nitro Software Inc.	Nitro PDF Pro	Nitro Software Inc.のNitro PDF Proにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-69627	2026-04-24 11:34	2026-04-13	Show	GitHub Exploit DB Packet Storm

4497	4.3	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-0971	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

4498	5.4	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2026-0972	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

4499	6.5	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2026-1089	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

4500	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21998	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351861	-	cpanel	cpanel	Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.	NVD-CWE-Other	CVE-2005-2021	2008-09-6 05:50	2005-06-20	Show	GitHub Exploit DB Packet Storm

351862	-	vipul	razor-agents	Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type.	NVD-CWE-Other	CVE-2005-2024	2008-09-6 05:50	2005-06-17	Show	GitHub Exploit DB Packet Storm

351863	-	enterasys	vertical_horizon-2402s	Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges.	NVD-CWE-Other	CVE-2005-2026	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

351864	-	enterasys	vertical_horizon-2402s	Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information …	NVD-CWE-Other	CVE-2005-2027	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

351865	-	amarok	web_frontend	amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and pass…	NVD-CWE-Other	CVE-2005-2029	2008-09-6 05:50	2005-06-17	Show	GitHub Exploit DB Packet Storm

351866	-	socialmpn	socialmpn	Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid para…	NVD-CWE-Other	CVE-2005-2031	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm

351867	-	fortibus	fortibus_cms	Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.	NVD-CWE-Other	CVE-2005-2038	2008-09-6 05:50	2005-06-20	Show	GitHub Exploit DB Packet Storm

351868	-	nanoblogger	nanoblogger	Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.	NVD-CWE-Other	CVE-2005-2039	2008-09-6 05:50	2005-06-19	Show	GitHub Exploit DB Packet Storm

351869	-	telnetd	telnetd	Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CV…	NVD-CWE-Other	CVE-2005-2040	2008-09-6 05:50	2005-06-20	Show	GitHub Exploit DB Packet Storm

351870	-	ajax-spell	ajax-spell	Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags.	NVD-CWE-Other	CVE-2005-2042	2008-09-6 05:50	2005-06-16	Show	GitHub Exploit DB Packet Storm