Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5811	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-31604	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

5812	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるゼロ除算に関する脆弱性	CWE-369 ゼロ除算	CVE-2026-31605	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

5813	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31606	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

5814	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31608	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

5815	7.1	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31614	2026-05-1 10:48	2026-04-24	Show	GitHub Exploit DB Packet Storm

5816	7.5	重要 Network	Tinyproxy project	Tinyproxy	Tinyproxy projectのTinyproxyにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-31842	2026-05-1 10:48	2026-04-7	Show	GitHub Exploit DB Packet Storm

5817	8	重要 Network	マイクロソフト	Microsoft Power Apps	Microsoft Power Apps のリモートでコードが実行される脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2026-32172	2026-05-1 10:48	2026-04-23	Show	GitHub Exploit DB Packet Storm

5818	7.1	重要 Local	マイクロソフト	Microsoft Office Microsoft Excel Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Online Server	Microsoft Excel の情報漏えいの脆弱性	CWE-125 境界外読み取り	CVE-2026-32188	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

5819	7.8	重要 Local	マイクロソフト	Microsoft Office Microsoft Excel Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Online Server	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32189	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

5820	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office のリモートコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32190	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350621	-	phpmyadmin	phpmyadmin	Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.	NVD-CWE-Other	CVE-2005-0992	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350622	-	francisco_burzi	php-nuke	Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) th…	NVD-CWE-Other	CVE-2005-1000	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350623	-	francisco_burzi	php-nuke	PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the…	NVD-CWE-Other	CVE-2005-1001	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350624	-	profitcode	payprocart	Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.	NVD-CWE-Other	CVE-2005-1003	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350625	-	profitcode	payprocart	Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.	NVD-CWE-Other	CVE-2005-1004	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350626	-	profitcode	payprocart	ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php w…	NVD-CWE-Other	CVE-2005-1005	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350627	-	stalker	communigate_pro	Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.	NVD-CWE-Other	CVE-2005-1007	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350628	-	bakbone	netvault	Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (…	NVD-CWE-Other	CVE-2005-1009	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350629	-	comersus_open_technologies	comersus_cart	Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.	NVD-CWE-Other	CVE-2005-1010	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350630	-	iatek	siteenable	Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the…	NVD-CWE-Other	CVE-2005-1012	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed