Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5541 9.9 緊急
Network 		マイクロソフト Azure IOT Central Azure IoT Central の特権昇格の脆弱性 CWE-200
情報漏えい 		CVE-2026-21515 2026-04-30 12:14 2026-04-24 Show GitHub Exploit DB Packet Storm
5542 4.8 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23752 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
5543 4.8 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23753 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
5544 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23756 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
5545 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23757 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
5546 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23758 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
5547 6.5 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-25773 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
5548 4.3 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-28736 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
5549 7.8 重要
Local 		DeepCool DeepCreative DeepCoolのDeepCreativeにおける安全でない継承されたパーミッションに関する脆弱性 CWE-277
安全でない継承されたパーミッション 		CVE-2026-30266 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
5550 7.5 重要
Network 		Angeet ES3 KVM Firmware AngeetのES3 KVM Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32297 2026-04-30 12:13 2026-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352541 - ecw-shop ecw-shop ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the tota… NVD-CWE-Other
CVE-2005-2623 2016-10-18 12:29 2005-08-19 Show GitHub Exploit DB Packet Storm
352542 - cpaint cpaint Eval injection vulnerability in CPAINT 1.3-SP allows remote attackers to execute arbitrary ASP code via the cpaint_argument[] parameter to (1) calculator.asp or (2) cpaintfile.asp, which is directly … NVD-CWE-Other
CVE-2005-2624 2016-10-18 12:29 2005-08-19 Show GitHub Exploit DB Packet Storm
352543 - cpaint cpaint Incomplete blacklist vulnerability in the checkBlacklist function in CPAINT allows remote attackers to execute arbitrary commands via the (1) ExecuteGlobal function or (2) GetRef statement, which is … NVD-CWE-Other
CVE-2005-2625 2016-10-18 12:29 2005-08-19 Show GitHub Exploit DB Packet Storm
352544 - phptb topic_boards Multiple PHP file inclusion vulnerabilities in (1) admin_o.php, (2) board_o.php, (3) dev_o.php, (4) file_o.php or (5) tech_o.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute… NVD-CWE-Other
CVE-2005-2633 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352545 - phpfreenews phpfreenews Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Match or (2) CatID parameter to SearchResults.php, or (3) t… NVD-CWE-Other
CVE-2005-2637 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352546 - phpfreenews phpfreenews Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.ph… NVD-CWE-Other
CVE-2005-2638 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352547 - valusoft chris_moneymakers_world_poker_championship Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname. NVD-CWE-Other
CVE-2005-2639 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352548 - neoteris
juniper
netscreen 		instant_virtual_extranet
netscreen_screenos
ns-10
ns-100
ns-204
ns-500
ns-50ns25
netscreen-5gt
netscreen-idp
netscreen-idp_10
netscreen-idp_100
netscreen-idp_1000
… 		Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid user… NVD-CWE-Other
CVE-2005-2640 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352549 - tor tor Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor server… NVD-CWE-Other
CVE-2005-2643 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm
352550 - whisper32 whisper32 Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory. NVD-CWE-Other
CVE-2005-2664 2016-10-18 12:29 2005-08-23 Show GitHub Exploit DB Packet Storm