Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5411	7.8	重要 Local	Amazon.com, Inc.	Kiro IDE	Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-0830	2026-04-30 12:08	2026-01-9	Show	GitHub Exploit DB Packet Storm

5412	5.4	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-25720	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5413	9.8	緊急 Network	huggingface	LeRobot	huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-25874	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

5414	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-27841	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5415	9.1	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-27843	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5416	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-33524	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5417	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33666	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5418	7.5	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35064	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

5419	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35170	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

5420	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35176	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349121	-	microsoft	windows_xp	By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer.	NVD-CWE-Other	CVE-2005-3595	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

349122	-	iisworks	aspknowledgebase	SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.	NVD-CWE-Other	CVE-2005-3596	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

349123	-	sap	sap_web_application_server	HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.	NVD-CWE-Other	CVE-2005-3633	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349124	-	sap	sap_web_application_server	frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-…	NVD-CWE-Other	CVE-2005-3634	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349125	-	sap	sap_web_application_server	Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-s…	NVD-CWE-Other	CVE-2005-3635	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349126	-	sap	sap_web_application_server	Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.	NVD-CWE-Other	CVE-2005-3636	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349127	-	floosietek	ftgate	Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonst…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-3640	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349128	-	phpadsnew phppgads	phpadsnew phppgads	phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, a…	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349129	-	phpadsnew phppgads	phpadsnew phppgads	Upgrade to phpAdsNew version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=11386 Upgrade to phpPgAds version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=36679 …	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

349130	-	phpadsnew phppgads	phpadsnew phppgads	Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID…	CWE-89 SQL Injection	CVE-2005-3646	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm