Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5551 8.1 重要
Network 		xibosignage xibo xibosignageのxiboにおける複数の脆弱性 CWE-184
CWE-89
CVE-2026-31952 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5552 5.4 警告
Network 		xibosignage xibo xibosignageのxiboにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-31953 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5553 4.9 警告
Network 		xibosignage xibo xibosignageのxiboにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-31955 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5554 4.3 警告
Network 		xibosignage xibo xibosignageのxiboにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-31956 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5555 8.8 重要
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-32171 2026-04-30 12:31 2026-04-14 Show GitHub Exploit DB Packet Storm
5556 7.5 重要
Network 		getkirby kirby getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-32870 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5557 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33076 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
5558 7.5 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33077 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
5559 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33078 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
5560 8.8 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33208 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349701 - mailscanner mailscanner SQL injection vulnerability in in the authenticate function in MailWatch for MailScanner 1.0.2 allows remote attackers to execute arbitrary SQL commands. NVD-CWE-Other
CVE-2005-3470 2017-07-11 10:33 2005-11-3 Show GitHub Exploit DB Packet Storm
349702 - punbb punbb SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter. NVD-CWE-Other
CVE-2005-3518 2017-07-11 10:33 2005-11-6 Show GitHub Exploit DB Packet Storm
349703 - mysource mysource Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary local files via the (1) INCLUDE_PATH and (2) SQUIZLIB_PATH pa… NVD-CWE-Other
CVE-2005-3519 2017-07-11 10:33 2005-11-6 Show GitHub Exploit DB Packet Storm
349704 - mysource mysource Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) the target_url parameter in upgrade_in_progress_backend.ph… NVD-CWE-Other
CVE-2005-3520 2017-07-11 10:33 2005-11-6 Show GitHub Exploit DB Packet Storm
349705 - e107 e107 SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the (1) a_nam… NVD-CWE-Other
CVE-2005-3521 2017-07-11 10:33 2005-11-6 Show GitHub Exploit DB Packet Storm
349706 - adventnet manageengine_netflow_analyzer Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the grDisp parameter. NVD-CWE-Other
CVE-2005-3522 2017-07-11 10:33 2005-11-6 Show GitHub Exploit DB Packet Storm
349707 - linux-ftpd-ssl linux-ftpd-ssl Buffer overflow in the SSL-ready version of linux-ftpd (linux-ftpd-ssl) 0.17 allows remote attackers to execute arbitrary code by creating a long directory name, then executing the XPWD command. NVD-CWE-Other
CVE-2005-3524 2017-07-11 10:33 2005-11-7 Show GitHub Exploit DB Packet Storm
349708 - antville antville Cross-site scripting (XSS) vulnerability in Antville 1.1 allows remote attackers to inject arbitrary web script or HTML via the notfound.skin error document. NVD-CWE-Other
CVE-2005-3530 2017-07-11 10:33 2005-11-21 Show GitHub Exploit DB Packet Storm
349709 - f-secure f-secure_anti-virus
internet_gatekeeper 		suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local us… NVD-CWE-Other
CVE-2005-3546 2017-07-11 10:33 2005-11-16 Show GitHub Exploit DB Packet Storm
349710 - phpkit phpkit Multiple cross-site scripting (XSS) vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in (1) login/profile.php, (2) log… CWE-79
Cross-site Scripting 		CVE-2005-3552 2017-07-11 10:33 2005-11-16 Show GitHub Exploit DB Packet Storm