Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5001	7.2	重要 Network	LibreNMS	LibreNMS	LibreNMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-6204	2026-04-24 11:35	2026-04-13	Show	GitHub Exploit DB Packet Storm

5002	10	緊急 Network	ATRODO (Jon Gentle)	Net::Dropbear	ATRODO (Jon Gentle)のNet::Dropbearにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2016-6129 CVE-2018-12437 CVE-2025-15638	2026-04-24 11:35	2026-04-21	Show	GitHub Exploit DB Packet Storm

5003	9.8	緊急 Network	The Perl Foundation	Perl	The Perl FoundationのPerlにおける不特定の脆弱性	CWE-Other その他	CVE-2026-3381 CVE-2026-4176	2026-04-24 11:35	2026-03-29	Show	GitHub Exploit DB Packet Storm

5004	5.3	警告 Network	Tokuhiro Matsuno (tokuhirom)	Amon2::Plugin::Web::CSRFDefender	Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性	CWE-338 CWE-340	CVE-2025-15604 CVE-2026-5082	2026-04-24 11:35	2026-04-8	Show	GitHub Exploit DB Packet Storm

5005	7.5	重要 Network	pyLoad	pyLoad	pyLoadにおける複数の脆弱性	CWE-502 CWE-863	CVE-2026-33509 CVE-2026-35464	2026-04-24 11:35	2026-04-7	Show	GitHub Exploit DB Packet Storm

5006	9.8	緊急 Network	Tomas Varaneckas	JAD Java Decompiler	Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2016-20049	2026-04-24 11:35	2026-03-28	Show	GitHub Exploit DB Packet Storm

5007	6.1	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-10242	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

5008	9.1	緊急 Network	WSO2	Identity Server as Key Manager WSO2 API Manager WSO2 Identity Server WSO2 Open Banking AM WSO2 Open Banking IAM	WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-2374	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

5009	5.4	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4867	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

5010	7.5	重要 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-8010	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349981	-	hosting_controller	hosting_controller	The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domai…	NVD-CWE-Other	CVE-2005-0695	2016-10-18 12:13	2005-03-7	Show	GitHub Exploit DB Packet Storm

349982	-	oracle	database_server	Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\\.\\.." (modified dot dot backslash) sequences to UTL_FILE funct…	NVD-CWE-Other	CVE-2005-0701	2016-10-18 12:13	2005-03-7	Show	GitHub Exploit DB Packet Storm

349983	-	gamearena	experience2	PHP remote file inclusion vulnerability in modules.php in eXPerience2 allows remote attackers to execute arbitrary PHP code by modifying the file parameter to reference a URL on a remote web server t…	NVD-CWE-Other	CVE-2005-0721	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

349984	-	seth_m._knorr	biz_mail_form	CRLF injection vulnerability in bizmail.cgi in Biz Mail Form before 2.2 allows remote attackers to bypass the email check and send spam e-mail via CRLF sequences and forged mail headers in the email …	NVD-CWE-Other	CVE-2005-0493	2016-10-18 12:12	2005-05-2	Show	GitHub Exploit DB Packet Storm

349985	-	seth_m._knorr	biz_mail_form	Upgrade to newest version.	NVD-CWE-Other	CVE-2005-0493	2016-10-18 12:12	2005-05-2	Show	GitHub Exploit DB Packet Storm

349986	-	avaya	ip_office_phone_manager ip_soft_phone	The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users to steal usernames a…	NVD-CWE-Other	CVE-2005-0506	2016-10-18 12:12	2005-03-14	Show	GitHub Exploit DB Packet Storm

349987	-	gd_software	sd_server	Directory traversal vulnerability in SD Server 4.0.70 and earlier allows remote attackers to read arbitrary files via .. sequences in an HTTP request.	NVD-CWE-Other	CVE-2005-0507	2016-10-18 12:12	2005-03-14	Show	GitHub Exploit DB Packet Storm

349988	-	microsoft mono	.net_framework mono	Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for AS…	NVD-CWE-Other	CVE-2005-0509	2016-10-18 12:12	2005-03-14	Show	GitHub Exploit DB Packet Storm

349989	-	jelsoft	vbulletin	misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.	NVD-CWE-Other	CVE-2005-0511	2016-10-18 12:12	2005-02-21	Show	GitHub Exploit DB Packet Storm

349990	-	pmachine	pmachine_pro	PHP remote file inclusion vulnerability in mail_autocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to exec…	NVD-CWE-Other	CVE-2005-0513	2016-10-18 12:12	2005-02-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed