Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4801 7.3 重要
Local 		i-PRO株式会社 IP簡単設定ソフトウェア i-PRO製IP簡単設定ソフトウェアにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-34488 2026-04-23 12:21 2026-04-23 Show GitHub Exploit DB Packet Storm
4802 4.7 警告
Network 		彼方株式会社 CMS ALAYA CMS ALAYAにおけるSQLインジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40529 2026-04-23 12:07 2026-04-23 Show GitHub Exploit DB Packet Storm
4803 10 緊急
Network 		Quest Software Inc. KACE Systems Management Appliance Quest Software Inc.のKACE Systems Management Applianceにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-32975 2026-04-23 10:17 2025-06-24 Show GitHub Exploit DB Packet Storm
4804 7.5 重要
Network 		jsonparser project jsonparser jsonparser projectのjsonparserにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-32285 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
4805 7.5 重要
Network 		antchfx Xpath antchfxのXpathにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-32287 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
4806 5.5 警告
Local 		Direct-Soft Inc. WinMPG Video Convert Direct-Soft Inc.のWinMPG Video Convertにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25644 2026-04-23 10:17 2026-03-24 Show GitHub Exploit DB Packet Storm
4807 5.3 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift レッドハットのMirror Registry for Red Hat OpenShiftにおけるエラーメッセージによる情報漏えいに関する脆弱性 CWE-209
エラーメッセージによる情報漏えい 		CVE-2025-14243 2026-04-23 10:17 2026-04-8 Show GitHub Exploit DB Packet Storm
4808 9 緊急
Network 		XWiki Blog Application XWikiのBlog Applicationにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-66024 2026-04-23 10:17 2026-03-4 Show GitHub Exploit DB Packet Storm
4809 6.5 警告
Network 		レッドハット Mirror Registry for Red Hat OpenShift
Quay 		レッドハットのMirror Registry for Red Hat OpenShift等の複数製品におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-2377 2026-04-23 10:17 2026-04-8 Show GitHub Exploit DB Packet Storm
4810 7.2 重要
Network 		langchain Langgraph langchainのLanggraphにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-28277 2026-04-23 10:16 2026-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349881 - omnistar_interactive omnistar_kbase Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in users/comments.php, (2) category_… NVD-CWE-Other
CVE-2005-3880 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
349882 - faqsystems faqring_knowledge_base_software SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2005-3882 2011-03-8 11:27 2005-11-29 Show GitHub Exploit DB Packet Storm
349883 - - - Unspecified vulnerability in Cisco Security Agent (CSA) 4.5.0 and 4.5.1 agents, when running on Windows systems, allows local users to bypass protections and gain system privileges by executing certa… NVD-CWE-Other
CVE-2005-3886 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349884 - - - Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or cra… NVD-CWE-Other
CVE-2005-3900 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349885 - amazon_shop amazon_shop Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query paramete… CWE-79
Cross-site Scripting 		CVE-2005-3908 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349886 - bosdev bosdates Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters. NVD-CWE-Other
CVE-2005-3911 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349887 - vchs vchs Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the f… NVD-CWE-Other
CVE-2005-3913 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349888 - affcommerce affcommerce Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemI… NVD-CWE-Other
CVE-2005-3914 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349889 - clavister clavister_firewall
clavister_security_gateway 		The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as… NVD-CWE-Other
CVE-2005-3915 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349890 - wsn_forum wsn_forum SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action. NVD-CWE-Other
CVE-2005-3916 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm