Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5831 7.5 重要
Adjacent 		VMware Spring Boot VMwareのSpring Bootにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-40972 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5832 7 重要
Local 		VMware Spring Boot VMwareのSpring Bootにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2026-40973 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5833 7.5 重要
Network 		VMware Spring Boot VMwareのSpring Bootにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-40975 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5834 9.1 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40976 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5835 6.7 警告
Local 		VMware Spring Boot VMwareのSpring Bootにおけるリンク解釈に関する脆弱性 CWE-59
リンク解釈の問題 		CVE-2026-40977 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5836 8.8 重要
Network 		VMware Spring AI VMwareのSpring AIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40978 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5837 6.1 警告
Local 		VMware Spring AI VMwareのSpring AIにおける安全でない一時ファイルに関する脆弱性 CWE-377
安全でない一時ファイル 		CVE-2026-40979 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5838 6.5 警告
Network 		VMware Spring AI VMwareのSpring AIにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40980 2026-05-1 10:47 2026-04-28 Show GitHub Exploit DB Packet Storm
5839 5.3 警告
Local 		OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41332 2026-05-1 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
5840 4.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2026-41339 2026-05-1 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350871 - microsoft windows_2000
windows_nt 		Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote attackers to (1) list Window… NVD-CWE-Other
CVE-2005-2150 2017-07-11 10:32 2005-07-11 Show GitHub Exploit DB Packet Storm
350872 - apple mac_os_x Unspecified vulnerability in the Apple Mac OS X kernel before 10.4.2 allows remote attackers to cause a denial of service (kernel panic) via a crafted TCP packet, possibly related to source routing o… NVD-CWE-Other
CVE-2005-2194 2017-07-11 10:32 2005-12-31 Show GitHub Exploit DB Packet Storm
350873 - freebsd freebsd The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass r… NVD-CWE-Other
CVE-2005-2218 2017-07-11 10:32 2005-07-26 Show GitHub Exploit DB Packet Storm
350874 - cisco call_manager The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code o… NVD-CWE-Other
CVE-2005-2244 2017-07-11 10:32 2005-07-12 Show GitHub Exploit DB Packet Storm
350875 - apple safari Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitate… NVD-CWE-Other
CVE-2005-2272 2017-07-11 10:32 2005-07-13 Show GitHub Exploit DB Packet Storm
350876 - novell groupwise_webaccess Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded ja… NVD-CWE-Other
CVE-2005-2276 2017-07-11 10:32 2005-07-26 Show GitHub Exploit DB Packet Storm
350877 - cisco security_agent Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet. NVD-CWE-Other
CVE-2005-2280 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm
350878 - oracle jdeveloper Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information. NVD-CWE-Other
CVE-2005-2292 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm
350879 - oracle forms Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local … NVD-CWE-Other
CVE-2005-2294 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm
350880 - pyrosoft_inc netpanzer NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero datablock size. NVD-CWE-Other
CVE-2005-2295 2017-07-11 10:32 2005-07-18 Show GitHub Exploit DB Packet Storm