Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5061 5.4 警告
Network 		Papra Papra Papraにおける複数の脆弱性 CWE-79
CWE-80
CVE-2026-35460 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5062 4.3 警告
Network 		Papra Papra Papraにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35461 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5063 4.3 警告
Network 		Papra Papra Papraにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-35462 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5064 8.1 重要
Network 		RedwoodSDK RedwoodSDK RedwoodSDKにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-39371 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
5065 8.1 重要
Network 		Sgbett BSV Ruby SDK (bsv-sdk)
bsv-wallet 		Sgbettのbsv-wallet等の複数製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-40070 2026-04-27 11:17 2026-04-9 Show GitHub Exploit DB Packet Storm
5066 8.1 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における入力で指定された数量の不適切な検証に関する脆弱性 CWE-1284
入力で指定された数量の不適切な検証 		CVE-2026-40093 2026-04-27 11:17 2026-04-9 Show GitHub Exploit DB Packet Storm
5067 5.5 警告
Local 		Giskard Giskard Giskardにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-40319 2026-04-27 11:17 2026-04-17 Show GitHub Exploit DB Packet Storm
5068 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-23356 2026-04-27 10:55 2026-03-25 Show GitHub Exploit DB Packet Storm
5069 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-23357 2026-04-27 10:55 2026-03-25 Show GitHub Exploit DB Packet Storm
5070 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用 		CVE-2026-23358 2026-04-27 10:55 2026-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347681 - amember amember Multiple PHP remote file inclusion vulnerabilities in aMember Pro 2.3.4 allow remote attackers to execute arbitrary PHP code via the config[root_dir] parameter to (1) mysql.inc.php, (2) efsnet.inc.ph… NVD-CWE-Other
CVE-2005-2865 2017-07-11 10:33 2005-09-9 Show GitHub Exploit DB Packet Storm
347682 - phpcommunitycalendar phpcommunitycalendar Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to execute arbitrary SQL commands via the (1) login field in login.php or (… NVD-CWE-Other
CVE-2005-2880 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347683 - phpcommunitycalendar phpcommunitycalendar phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory. NVD-CWE-Other
CVE-2005-2881 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347684 - phpcommunitycalendar phpcommunitycalendar Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the LocationID para… NVD-CWE-Other
CVE-2005-2882 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347685 - neocrome land_down_under Cross-site scripting (XSS) vulnerability in events.php in Land Down Under (LDU) 801 and earlier allows remote attackers to inject arbitrary web script or HTML via the Description field in an event. NVD-CWE-Other
CVE-2005-2884 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347686 - maxdev md-pro The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file exten… NVD-CWE-Other
CVE-2005-2885 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347687 - - - Multiple cross-site scripting (XSS) vulnerabilities in MAXdev MD-Pro 1.0.73, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via (1) the print parameter t… NVD-CWE-Other
CVE-2005-2886 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347688 - maxdev md-pro MAXdev MD-Pro 1.0.73, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to (1) wiki.php, (2) AutoTheme directory, (3) Blocks directory, (4) a… NVD-CWE-Other
CVE-2005-2887 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347689 - - - Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter to misc.php or (2) Content-Dispos… NVD-CWE-Other
CVE-2005-2888 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm
347690 - secureol ve2 SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct acce… NVD-CWE-Other
CVE-2005-2890 2017-07-11 10:33 2005-09-15 Show GitHub Exploit DB Packet Storm