Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5461	8.8	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-34186	2026-04-24 11:35	2026-04-13	Show	GitHub Exploit DB Packet Storm

5462	7.2	重要 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-34188	2026-04-24 11:35	2026-04-13	Show	GitHub Exploit DB Packet Storm

5463	9.8	緊急 Network	Vinyl Cache Varnish Software	varnish enterprise Vinyl Cache	Varnish Software等の複数ベンダの製品における動作順序 (正規化前の検証) に関する脆弱性	CWE-180 不適切な動作順序 (正規化前の検証)	CVE-2026-34475	2026-04-24 11:35	2026-03-27	Show	GitHub Exploit DB Packet Storm

5464	9.8	緊急 Network	GNU Project	GNU C Library	GNU ProjectのGNU C Libraryにおける複数の脆弱性	CWE-122 CWE-787	CVE-2026-5450	2026-04-24 11:35	2026-04-20	Show	GitHub Exploit DB Packet Storm

5465	7.2	重要 Network	LibreNMS	LibreNMS	LibreNMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-6204	2026-04-24 11:35	2026-04-13	Show	GitHub Exploit DB Packet Storm

5466	10	緊急 Network	ATRODO (Jon Gentle)	Net::Dropbear	ATRODO (Jon Gentle)のNet::Dropbearにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2016-6129 CVE-2018-12437 CVE-2025-15638	2026-04-24 11:35	2026-04-21	Show	GitHub Exploit DB Packet Storm

5467	9.8	緊急 Network	The Perl Foundation	Perl	The Perl FoundationのPerlにおける不特定の脆弱性	CWE-Other その他	CVE-2026-3381 CVE-2026-4176	2026-04-24 11:35	2026-03-29	Show	GitHub Exploit DB Packet Storm

5468	5.3	警告 Network	Tokuhiro Matsuno (tokuhirom)	Amon2::Plugin::Web::CSRFDefender	Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性	CWE-338 CWE-340	CVE-2025-15604 CVE-2026-5082	2026-04-24 11:35	2026-04-8	Show	GitHub Exploit DB Packet Storm

5469	7.5	重要 Network	pyLoad	pyLoad	pyLoadにおける複数の脆弱性	CWE-502 CWE-863	CVE-2026-33509 CVE-2026-35464	2026-04-24 11:35	2026-04-7	Show	GitHub Exploit DB Packet Storm

5470	9.8	緊急 Network	Tomas Varaneckas	JAD Java Decompiler	Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2016-20049	2026-04-24 11:35	2026-03-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355971	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.	NVD-CWE-Other	CVE-2005-0682	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

355972	-	mlterm	mlterm	Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.	NVD-CWE-Other	CVE-2005-0686	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355973	-	hashcash	hashcash	Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply addr…	NVD-CWE-Other	CVE-2005-0687	2008-09-6 05:47	2005-03-6	Show	GitHub Exploit DB Packet Storm

355974	-	jowood_productions	chaser	Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname.	NVD-CWE-Other	CVE-2005-0693	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355975	-	brt	copperexport	SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or…	NVD-CWE-Other	CVE-2005-0697	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355976	-	jason_hines	phpweblog	PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH para…	NVD-CWE-Other	CVE-2005-0698	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355977	-	aztek_forum	aztek_forum	The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.	NVD-CWE-Other	CVE-2005-0700	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355978	-	phpmyfaq	phpmyfaq	SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.	NVD-CWE-Other	CVE-2005-0702	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355979	-	xerox	workcentre_165 workcentre_175 workcentre_2128 workcentre_2636 workcentre_32_color workcentre_35 workcentre_3545 workcentre_40_color workcentre_45 workcentre_55 workcentr…	Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032,…	NVD-CWE-Other	CVE-2005-0703	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

355980	-	apple	mac_os_x mac_os_x_server	The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.	NVD-CWE-Other	CVE-2005-0713	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed