Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6111 7.5 重要
Network 		getkirby kirby getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-32870 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
6112 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33076 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
6113 7.5 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33077 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
6114 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33078 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
6115 8.8 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33208 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
6116 7.5 重要
Network 		PowerDNS dnsdist PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33254 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
6117 7.5 重要
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33256 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
6118 7.5 重要
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33258 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
6119 5 警告
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-33259 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
6120 5.9 警告
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける完全性チェックの欠如に関する脆弱性 CWE-353
完全性チェックの欠如 		CVE-2026-33261 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355741 - hp radia_client Buffer overflow in HP Radia Notify Daemon 3.1.0.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a long file extension. NVD-CWE-Other
CVE-2005-1826 2011-03-8 11:22 2005-05-3 Show GitHub Exploit DB Packet Storm
355742 - kerio kerio_mailserver
personal_firewall
winroute_firewall 		The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 … NVD-CWE-Other
CVE-2005-1062 2011-03-8 11:21 2005-05-2 Show GitHub Exploit DB Packet Storm
355743 - apple applescript
mac_os_x
mac_os_x_server 		The AppleScript Editor in Mac OS X 10.3.9 does not properly display script code for an applescript: URI, which can result in code that is different than the actual code that would be run, which could… NVD-CWE-Other
CVE-2005-1331 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
355744 - apple terminal
mac_os_x
mac_os_x_server 		Apple Terminal 1.4.4 allows attackers to execute arbitrary commands via terminal escape sequences. NVD-CWE-Other
CVE-2005-1341 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
355745 - apple terminal
mac_os_x 		The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-2005-1342 2011-03-8 11:21 2005-05-4 Show GitHub Exploit DB Packet Storm
355746 - phpmyadmin phpmyadmin The SQL install script in phpMyAdmin 2.6.2 is created with world-readable permissions, which allows local users to obtain the initial database password by reading the script. NVD-CWE-Other
CVE-2005-1392 2011-03-8 11:21 2005-05-3 Show GitHub Exploit DB Packet Storm
355747 - freebsd freebsd The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications t… NVD-CWE-Other
CVE-2005-1406 2011-03-8 11:21 2005-05-6 Show GitHub Exploit DB Packet Storm
355748 - soft3304 04webserver Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder. NVD-CWE-Other
CVE-2005-1416 2011-03-8 11:21 2005-05-3 Show GitHub Exploit DB Packet Storm
355749 - stefan_ritt elog_web_logbook ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL. NVD-CWE-Other
CVE-2005-0440 2011-03-8 11:20 2005-05-2 Show GitHub Exploit DB Packet Storm
355750 - mediawiki mediawiki Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allow remote attackers to inject arbitrary web script. NVD-CWE-Other
CVE-2005-0534 2011-03-8 11:20 2005-05-2 Show GitHub Exploit DB Packet Storm