Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5081	4.3	警告 Network	SAP	SAP HANA Database Explorer SAP HANA Cockpit	SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-34262	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

5082	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-35061	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

5083	9.8	緊急 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35546	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

5084	8.8	重要 Network	Anviz Global	Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-35682	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5085	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-36958	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

5086	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-36959	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

5087	8.8	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性	CWE-494 ダウンロードしたコードの完全性検証不備	CVE-2026-40066	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5088	8.1	重要 Adjacent	Anviz Global	Crosschex Standard	Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性	CWE-940 通信チャネルの送信元の不適切な検証	CVE-2026-40434	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5089	7.5	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40461	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5090	5.3	警告 Network	asrmicro	ASR1901 Firmware ASR1903 Firmware	asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-42800	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357301	-	xerox	document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre_490 document_centre_535 document_centre_555	Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.	NVD-CWE-Other	CVE-2005-2645	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

357302	-	xerox	document_centre_220 document_centre_230 document_centre_240 document_centre_255 document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre…	Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or rea…	NVD-CWE-Other	CVE-2005-2646	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

357303	-	xerox	document_centre_265 document_centre_332 document_centre_340 document_centre_420 document_centre_490 document_centre_535 document_centre_555	Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitr…	NVD-CWE-Other	CVE-2005-2647	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

357304	-	emefa	emefa_guestbook	Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.	NVD-CWE-Other	CVE-2005-2650	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

357305	-	maildrop	maildrop	lockmail in maildrop before 1.5.3 does not drop privileges before executing commands, which allows local users to gain privileges via command line arguments.	NVD-CWE-Other	CVE-2005-2655	2008-09-6 05:52	2005-08-31	Show	GitHub Exploit DB Packet Storm

357306	-	polygen	polygen	Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unautho…	NVD-CWE-Other	CVE-2005-2656	2008-09-6 05:52	2005-09-7	Show	GitHub Exploit DB Packet Storm

357307	-	softwolves_software	turquoise_superstat	Buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.	NVD-CWE-Other	CVE-2005-2658	2008-09-6 05:52	2005-09-16	Show	GitHub Exploit DB Packet Storm

357308	-	apachetop	apachetop	apachetop 0.12.5 and earlier, when running in debug mode, allows local users to create or append to arbitrary files via a symlink attack on atop.debug.	NVD-CWE-Other	CVE-2005-2660	2008-09-6 05:52	2005-10-1	Show	GitHub Exploit DB Packet Storm

357309	-	hauri	livecall virobot_advanced_server virobot_expert virobot_linux_server	Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via "…	NVD-CWE-Other	CVE-2005-2670	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

357310	-	woltlab	burning_board	SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters.	NVD-CWE-Other	CVE-2005-2673	2008-09-6 05:52	2005-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed