Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4851 7.8 重要
Local 		Composer Composer Composerにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-40176 2026-04-27 11:19 2026-04-15 Show GitHub Exploit DB Packet Storm
4852 6.1 警告
Network 		Apostrophe Technologies sanitize-html
ApostropheCMS 		Apostrophe TechnologiesのApostropheCMS等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40186 2026-04-27 11:18 2026-04-15 Show GitHub Exploit DB Packet Storm
4853 8.8 重要
Network 		Composer Composer Composerにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-40261 2026-04-27 11:18 2026-04-15 Show GitHub Exploit DB Packet Storm
4854 9.8 緊急
Network 		Phpscriptsmall Advance Gift Shop Pro Script PhpscriptsmallのAdvance Gift Shop Pro ScriptにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2019-25680 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
4855 9.8 緊急
Network 		WISDOM Pegasus CMS WISDOMのPegasus CMSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2019-25687 2026-04-27 11:18 2026-04-5 Show GitHub Exploit DB Packet Storm
4856 8.8 重要
Network 		Nextcloud
windmill project		 windmill
Nextcloud Flow 		Nextcloud等の複数ベンダの製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-22683 2026-04-27 11:18 2026-04-7 Show GitHub Exploit DB Packet Storm
4857 7.5 重要
Network 		XiangShan NEMU XiangShanのNEMUにおける複数の脆弱性 CWE-1287
CWE-131
CVE-2026-29645 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
4858 9.8 緊急
Network 		XiangShan NEMU XiangShanのNEMUにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-29649 2026-04-27 11:18 2026-04-20 Show GitHub Exploit DB Packet Storm
4859 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-125
CWE-193
CVE-2026-32605 2026-04-27 11:18 2026-04-13 Show GitHub Exploit DB Packet Storm
4860 9.6 緊急
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-1284
CWE-190
CWE-20
CWE-345
CVE-2026-33471 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350441 - - - Directory traversal vulnerability in the Webmail interface in SurgeMail 2.2g3 allows remote authenticated users to write arbitrary files or directories via a .. (dot dot) in the attach_id parameter. NVD-CWE-Other
CVE-2005-0845 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350442 - netwin surgemail Multiple cross-site scripting (XSS) vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the (1) message subject or (2)… NVD-CWE-Other
CVE-2005-0846 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350443 - bosanova
ibm
mochasoft
powerterm 		launcher400
client_access
tn5250
interconnect 		AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to e… NVD-CWE-Other
CVE-2005-0868 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350444 - oracle 10g_reports_server Multiple cross-site scripting (XSS) vulnerabilities in test.jsp in Oracle Reports Server 10g (9.0.4.3.3) allow remote attackers to inject arbitrary web script or HTML via the (1) desname or (2) reppr… NVD-CWE-Other
CVE-2005-0873 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350445 - cerulean_studios trillian Multiple buffer overflows in the (1) AIM, (2) MSN, (3) RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP … NVD-CWE-Other
CVE-2005-0874 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350446 - cerulean_studios trillian Multiple buffer overflows in the Yahoo plug-in for Trillian 2.0, 3.0, and 3.1 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response heade… NVD-CWE-Other
CVE-2005-0875 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350447 - smail smail Buffer overflow in smail 3.2.0.120 allows remote attackers or local users to execute arbitrary code via a long string in the MAIL FROM command and possibly other SMTP commands. NVD-CWE-Other
CVE-2005-0892 2016-10-18 12:15 2005-03-28 Show GitHub Exploit DB Packet Storm
350448 - smail smail modes.c in smail 3.2.0.120 implements signal handlers with certain unsafe library calls, which may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc. NVD-CWE-Other
CVE-2005-0893 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350449 - openmosixview openmosixview OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on (1) temporary files in the openmosixcollector directory or (… NVD-CWE-Other
CVE-2005-0894 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm
350450 - netcomm nb1300 Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service (device hang) via a large number of ping packets. NVD-CWE-Other
CVE-2005-0895 2016-10-18 12:15 2005-05-2 Show GitHub Exploit DB Packet Storm