Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4591 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71253 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4592 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71254 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4593 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71255 2026-05-12 10:21 2026-05-6 Show GitHub Exploit DB Packet Storm
4594 7.5 重要
Network
Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71256 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4595 8.8 重要
Network
CERN Rucio CERNのRucioにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-29080 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4596 8.8 重要
Network
CERN Rucio CERNのRucioにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-29090 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4597 7.1 重要
Network
vLLM vLLM vLLMにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-34760 2026-05-12 10:20 2026-04-2 Show GitHub Exploit DB Packet Storm
4598 8.8 重要
Network
OpenMRS OpenMRS OpenMRSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-40076 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4599 9.1 緊急
Network
TheCodingMachine Gotenberg TheCodingMachineのGotenbergにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-40281 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
4600 5.4 警告
Network
PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-40296 2026-05-12 10:20 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345891 - gnu
freebsd
gentoo
redhat
trustix
turbolinux
ubuntu
gzip
freebsd
linux
enterprise_linux
enterprise_linux_desktop
linux_advanced_workstation
secure_linux
turbolinux_appliance_server
turbolinux_desktop
turbolinux_home
turbo…
Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being dec… NVD-CWE-Other
CVE-2005-0988 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345892 - cisco ios Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to … CWE-287
Improper Authentication
CVE-2005-1020 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345893 - cisco ios Memory leak in Secure Shell (SSH) in Cisco IOS 12.0 through 12.3, when authenticating against a TACACS+ server, allows remote attackers to cause a denial of service (memory consumption) via an incorr… CWE-399
 Resource Management Errors
CVE-2005-1021 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345894 - paul_vixie
redhat
vixie_cron
enterprise_linux
crontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient infor… NVD-CWE-Other
CVE-2005-1038 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345895 - cisco ios Cisco IOS 12.2T, 12.3 and 12.3T, when using Easy VPN Server XAUTH version 6 authentication, allows remote attackers to bypass authentication via a "malformed packet." NVD-CWE-Other
CVE-2005-1057 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345896 - cisco ios Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifi… NVD-CWE-Other
CVE-2005-1058 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345897 - mozilla firefox
mozilla
Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show ja… NVD-CWE-Other
CVE-2005-1153 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345898 - mozilla firefox
mozilla
Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed w… NVD-CWE-Other
CVE-2005-1154 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345899 - mozilla firefox
mozilla
The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attri… CWE-94
Code Injection
CVE-2005-1155 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm
345900 - mozilla
netscape
firefox
mozilla
navigator
Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearchi… NVD-CWE-Other
CVE-2005-1156 2017-10-11 10:30 2005-05-2 Show GitHub Exploit DB Packet Storm