Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4891	7.4	重要 Network	Eclipse Foundation	Jetty	Eclipse FoundationのJettyにおける複数の脆弱性	CWE-226 CWE-287	CVE-2026-5795	2026-04-24 11:40	2026-04-8	Show	GitHub Exploit DB Packet Storm

4892	7.5	重要 Network	GNU Project	GNU C Library	GNU ProjectのGNU C Libraryにおけるバッファアンダーリードの脆弱性	CWE-127 バッファアンダーリード	CVE-2026-5928	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

4893	7.1	重要 Network	ConnectWise, Inc.	automate	ConnectWise, Inc.のautomateにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-6066	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

4894	9.1	緊急 Network	Open JS Foundation	fastify/middie	Open JS Foundationの@fastify/middieにおける解釈の競合に関する脆弱性	CWE-436 解釈の競合	CVE-2026-6270	2026-04-24 11:40	2026-04-16	Show	GitHub Exploit DB Packet Storm

4895	9.9	緊急 Network	ASUSTOR Inc.	data master	ASUSTOR Inc.のdata masterにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6643	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

4896	9.1	緊急 Network	ASUSTOR Inc.	data master	ASUSTOR Inc.のdata masterにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-6644	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

4897	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6746	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

4898	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6747	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

4899	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6748	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

4900	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-6749	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354481	-	trend_micro	client-server-messaging_suite_smb client-server_suite_smb control_manager interscan_emanager interscan_messaging_security_suite interscan_viruswall interscan_web_security_suite i…	Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with…	NVD-CWE-Other	CVE-2005-0533	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354482	-	ginp	ginp	Directory traversal vulnerability in (1) GinpPictureServlet.java and (2) PicCollection.java in ginp (Java Photo Gallery Web Application) before 0.22 allows remote attackers to read arbitrary files.	NVD-CWE-Other	CVE-2005-0538	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354483	-	ibm	hardware_management_console	Unknown vulnerability in IBM Hardware Management Console (HMC) before 4.4 for POWER5 servers allows local users to gain privileges, related to the Guided Setup Wizard.	NVD-CWE-Other	CVE-2005-0539	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354484	-	phpmyadmin	phpmyadmin	phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to (1) sqlvalidator.lib.php, (2) sqlparser.lib.php, (3) select_theme.lib.php, (4) select_lang.lib.ph…	NVD-CWE-Other	CVE-2005-0544	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354485	-	cupidsystems	cis_webserver	Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the URL.	NVD-CWE-Other	CVE-2005-0574	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354486	-	sun	solaris	Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.	NVD-CWE-Other	CVE-2005-0576	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354487	-	dna	mkbold-mkitalic	Format string vulnerability in DNA MKBold-MKItalic 0.06_1 and earlier allows remote attackers to execute arbitrary code via crafted BDF font files.	NVD-CWE-Other	CVE-2005-0577	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

354488	-	freenx	freenx	nxagent in FreeNX before 0.2.8 does not properly handle when the XAUTHORITY environment variable is not set, which allows local users to access the X server without X authentication.	NVD-CWE-Other	CVE-2005-0579	2008-09-6 05:46	2005-02-25	Show	GitHub Exploit DB Packet Storm

354489	-	krzysztof_dabrowski	cmd5checkpw	cmd5checkpw, when running setuid, does not properly drop privileges before calling the execvp function, which allows local users to read the poppasswd file.	NVD-CWE-Other	CVE-2005-0580	2008-09-6 05:46	2005-02-25	Show	GitHub Exploit DB Packet Storm

354490	-	apple	mac_os_x_server	Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.	NVD-CWE-Other	CVE-2005-0594	2008-09-6 05:46	2005-05-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed