Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5211 9.1 緊急
Network 		CyberPanel CyberPanel CyberPanelにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-41473 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
5212 8.2 重要
Local 		レッドハット Red Hat Advanced Cluster Management for Kubernetes レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-4740 2026-04-30 12:08 2026-04-7 Show GitHub Exploit DB Packet Storm
5213 9.8 緊急
Network 		Pipecat Pipecat Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2025-62373 2026-04-30 12:08 2026-04-23 Show GitHub Exploit DB Packet Storm
5214 7.8 重要
Local 		Amazon.com, Inc. Kiro IDE Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-0830 2026-04-30 12:08 2026-01-9 Show GitHub Exploit DB Packet Storm
5215 5.4 警告
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-25720 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
5216 9.8 緊急
Network 		huggingface LeRobot huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-25874 2026-04-30 12:08 2026-04-23 Show GitHub Exploit DB Packet Storm
5217 8.1 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-27841 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
5218 9.1 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-27843 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
5219 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-33524 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
5220 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-33666 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348051 - interchange_development_group interchange SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-3072 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
348052 - interchange_development_group interchange Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the (1) "mike", (2) "standard", or (3) "foundation" demo, allow… NVD-CWE-Other
CVE-2005-3073 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
348053 - - - SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the user_pass_sha1 value in a cookie. NVD-CWE-Other
CVE-2005-3082 2017-07-11 10:33 2005-09-28 Show GitHub Exploit DB Packet Storm
348054 - avi_alkalay man_cgi Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter. NVD-CWE-Other
CVE-2005-3094 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
348055 - avi_alkalay notify Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter. NVD-CWE-Other
CVE-2005-3095 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
348056 - avi_alkalay nslookup.cgi Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter. NVD-CWE-Other
CVE-2005-3096 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
348057 - debian backupninja The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2005-3111 2017-07-11 10:33 2005-09-30 Show GitHub Exploit DB Packet Storm
348058 - symantec_veritas netbackup Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute … NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
348059 - symantec_veritas netbackup Failed exploit attempts may result in a denial-of-service condition. NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
348060 - antiword antiword The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and … CWE-59
Link Following 		CVE-2005-3126 2017-07-11 10:33 2005-12-31 Show GitHub Exploit DB Packet Storm