Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4631 9.8 緊急
Network 		NICO-FTP Project NICO-FTP NICO-FTP ProjectのNICO-FTPにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25254 2026-04-28 10:11 2026-04-4 Show GitHub Exploit DB Packet Storm
4632 5.5 警告
Local 		ks-soft IP-Tools KS-SoftのIP-Toolsにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25256 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
4633 7.8 重要
Local 		River Past Cam Do Project River Past Cam Do River Past Cam Do ProjectのRiver Past Cam Doにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2019-25626 2026-04-28 10:11 2026-03-24 Show GitHub Exploit DB Packet Storm
4634 5.5 警告
Local 		River Past Ringtone Converter Project River Past Ringtone Converter River Past Ringtone Converter ProjectのRiver Past Ringtone Converterにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25665 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
4635 7.8 重要
Local 		River Past Video Clear Project River Past Video Clear River Past Video Clear ProjectのRiver Past Video Clearにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25670 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
4636 7.8 重要
Local 		iBoysoft NTFS for Mac iBoysoftのNTFS for Macにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-2637 2026-04-28 10:11 2026-03-3 Show GitHub Exploit DB Packet Storm
4637 6.6 警告
Local 		Saurabh Kumar python-dotenv Saurabh Kumarのpython-dotenvにおける複数の脆弱性 CWE-59
CWE-61
CVE-2026-28684 2026-04-28 10:11 2026-04-20 Show GitHub Exploit DB Packet Storm
4638 10 緊急
Network 		Smallstep Step CA SmallstepのStep CAにおける複数の脆弱性 CWE-287
CWE-295
CWE-295
CVE-2026-30836 2026-04-28 10:11 2026-03-19 Show GitHub Exploit DB Packet Storm
4639 4.7 警告
Local 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-32290 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
4640 6.8 警告
Physics 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32291 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347151 - - - SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie. NVD-CWE-Other
CVE-2005-3082 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
347152 - avi_alkalay man_cgi Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter. NVD-CWE-Other
CVE-2005-3094 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
347153 - avi_alkalay notify Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter. NVD-CWE-Other
CVE-2005-3095 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
347154 - avi_alkalay nslookup.cgi Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter. NVD-CWE-Other
CVE-2005-3096 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
347155 - debian backupninja The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2005-3111 2017-07-11 10:33 2005-09-30 Show GitHub Exploit DB Packet Storm
347156 - symantec_veritas netbackup Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute … NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
347157 - symantec_veritas netbackup Failed exploit attempts may result in a denial-of-service condition. NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
347158 - antiword antiword The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and … CWE-59
Link Following 		CVE-2005-3126 2017-07-11 10:33 2005-12-31 Show GitHub Exploit DB Packet Storm
347159 - lucidcms lucidcms Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string. NVD-CWE-Other
CVE-2005-3127 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm
347160 - squirrelmail address_add_plugin Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag. NVD-CWE-Other
CVE-2005-3128 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm