Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5311 6.3 警告
Local 		Glances project Glances Nicolas Hennion (nicolargo)のGlancesにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-35588 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
5312 7.3 重要
Local 		Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-35603 2026-04-24 11:42 2026-04-17 Show GitHub Exploit DB Packet Storm
5313 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost ServerにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-3590 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
5314 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-39366 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
5315 5.4 警告
Network 		WWBN AVideo WWBNのAVideoにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-39367 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
5316 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39368 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
5317 7.6 重要
Network 		WWBN AVideo WWBNのAVideoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39369 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
5318 7.1 重要
Network 		WWBN AVideo WWBNのAVideoにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39370 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
5319 7.8 重要
Local 		Vim Vim Vimにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-39881 2026-04-24 11:42 2026-04-8 Show GitHub Exploit DB Packet Storm
5320 5.3 警告
Network 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-39886 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352421 - mantis mantis Multiple SQL injection vulnerabilities in the manage user page (manage_user_page.php) in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prefix and (2… NVD-CWE-Other
CVE-2005-4519 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352422 - mantis mantis Unspecified "port injection" vulnerabilities in filters in Mantis 1.0.0rc3 and earlier have unknown impact and attack vectors. NOTE: due to a lack of relevant details in the vendor changelog, which … NVD-CWE-Other
CVE-2005-4520 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352423 - - - CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in login_cookie_tes… NVD-CWE-Other
CVE-2005-4521 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352424 - mantis mantis Multiple cross-site scripting (XSS) vulnerabilities in the view_filters_page.php filters script in Mantis 1.0.0rc3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1… NVD-CWE-Other
CVE-2005-4522 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352425 - mantis mantis Mantis 1.0.0rc3 and earlier discloses private bugs via public RSS feeds, which allows remote attackers to obtain sensitive information. NVD-CWE-Other
CVE-2005-4523 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352426 - - - Mantis 1.0.0rc3 does not properly handle "Make note private" when a bug is being resolved, which has unknown impact and attack vectors, probably related to an information leak. NVD-CWE-Other
CVE-2005-4524 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352427 - chatspot chatspot SQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-4528 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352428 - chatspot chatspot The Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via unknown vectors. NVD-CWE-Other
CVE-2005-4529 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352429 - rws statistics_counter SQL injection vulnerability in the "user area" in RWS Statistics Counter before 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2005-4548 2011-03-8 11:28 2005-12-28 Show GitHub Exploit DB Packet Storm
352430 - adtran netvanta The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow remote attackers to cause a denial of service via crafted IKE packets, as demonstrated by t… NVD-CWE-Other
CVE-2005-4564 2011-03-8 11:28 2005-12-29 Show GitHub Exploit DB Packet Storm