Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4811 7.2 重要
Network 		boidcms boidcms boidcmsにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2026-39387 2026-04-27 11:21 2026-04-14 Show GitHub Exploit DB Packet Storm
4812 9.9 緊急
Network 		openremote openremote openremoteにおける複数の脆弱性 CWE-917
CWE-94
CVE-2026-39842 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
4813 10 緊急
Network 		Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-39861 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
4814 8.1 重要
Network 		Suyog Sonwalkar MCP Server Kubernetes Suyog SonwalkarのMCP Server Kubernetesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-39884 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
4815 6.5 警告
Network 		jqlang jq jqlangのjqにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-39979 2026-04-27 11:21 2026-04-13 Show GitHub Exploit DB Packet Storm
4816 5.5 警告
Local 		Linux Foundation Sigstore Timestamp Authority Linux FoundationのSigstore Timestamp Authorityにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-39984 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
4817 7.1 重要
Network 		lfprojects Zarf lfprojectsのZarfにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40090 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
4818 4.4 警告
Local 		Authzed, Inc. SpiceDB Authzed, Inc.のSpiceDBにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-40091 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
4819 5.4 警告
Network 		OpenMage Magento OpenMageのMagentoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40098 2026-04-27 11:21 2026-04-20 Show GitHub Exploit DB Packet Storm
4820 7.5 重要
Network 		free5gc free5gc free5GCにおける複数の脆弱性 CWE-285
CWE-636
CVE-2026-40248 2026-04-27 11:21 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347521 - argosoft argosoft_mail_server Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1) read arbitrary files via the UIDL parameter to the msg script or (2) copy or m… NVD-CWE-Other
CVE-2005-1283 2017-07-11 10:32 2005-04-22 Show GitHub Exploit DB Packet Storm
347522 - argosoft argosoft_mail_server The addnew script in Argosoft Mail Server Pro 1.8.7.6 allows remote attackers to create arbitrary accounts, even if "Allow Creation of Accounts From the Web Interface" is disabled, via a direct HTTP … NVD-CWE-Other
CVE-2005-1284 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347523 - cartwiz asp_cart Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) addToCart.asp or (2) productDetails.asp, the (3)… NVD-CWE-Other
CVE-2005-1291 2017-07-11 10:32 2005-04-23 Show GitHub Exploit DB Packet Storm
347524 - elemental_software cartwiz Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend.asp or (2) addToWi… NVD-CWE-Other
CVE-2005-1292 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347525 - adobe
apple 		version_cue
mac_os_x 		The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to exe… NVD-CWE-Other
CVE-2005-1307 2017-07-11 10:32 2005-05-17 Show GitHub Exploit DB Packet Storm
347526 - intersoft netterm Buffer overflow in NetFtpd for NetTerm 5.1.1 and earlier allows remote attackers to execute arbitrary code via a long USER command. NVD-CWE-Other
CVE-2005-1323 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347527 - matthieu_aubry phpmyvisites Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters. NVD-CWE-Other
CVE-2005-1324 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347528 - perl convert_uulib Buffer overflow in Convert-UUlib (Convert::UUlib) before 1.051 allows remote attackers to execute arbitrary code via a malformed parameter to a read operation. NVD-CWE-Other
CVE-2005-1349 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347529 - graycms graycms PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the path_prefix parameter to reference a URL on a remote web ser… NVD-CWE-Other
CVE-2005-1360 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm
347530 - metalinks metacart_e-shop Multiple SQL injection vulnerabilities in MetaCart e-Shop 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter in product.asp or (2) strCatalog_NAME parameter … NVD-CWE-Other
CVE-2005-1361 2017-07-11 10:32 2005-05-2 Show GitHub Exploit DB Packet Storm