Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6431	6.5	警告 Network	The Prosody Team	Prosody	The Prosody TeamのProsodyにおける保護されていない代替チャネルに関する脆弱性	CWE-420 保護されていない代替チャネル	CVE-2026-43505	2026-05-7 12:00	2026-05-1	Show	GitHub Exploit DB Packet Storm

6432	7.5	重要 Network	The Prosody Team	Prosody	The Prosody TeamのProsodyにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43506	2026-05-7 11:59	2026-05-1	Show	GitHub Exploit DB Packet Storm

6433	7.5	重要 Network	The Prosody Team	Prosody	The Prosody TeamのProsodyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-43507	2026-05-7 11:59	2026-05-1	Show	GitHub Exploit DB Packet Storm

6434	7.5	重要 Network	Debian GStreamer レッドハット	GStreamer Debian GNU/Linux Red Hat Enterprise Linux GStreamer Good Plug-ins	Debian等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-1940	2026-05-7 11:31	2026-03-23	Show	GitHub Exploit DB Packet Storm

6435	9.8	緊急 Network	OPPO	ColorOS Assistant	OPPOのColorOS Assistantにおける複数の脆弱性	CWE-22 CWE-23	CVE-2026-22070	2026-05-7 11:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

6436	8.8	重要 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-42364	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

6437	7.5	重要 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品における観測された状態からの推測に関する脆弱性	CWE-341 観測された状態からの推測	CVE-2026-42365	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

6438	6.1	警告 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42366	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

6439	6.5	警告 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-42367	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

6440	9.9	緊急 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品における不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2026-42368	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349891	-	scriptscenter	ezupload_pro	SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.	NVD-CWE-Other	CVE-2005-4309	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349892	-	almondsoft	almond_personals	SQL injection vulnerability in index.php in AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter.	NVD-CWE-Other	CVE-2005-4313	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349893	-	hitachi	cosminexus_collaboration_portal groupmax_collaboration_portal groupmax_collaboration_web_client	Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration…	NVD-CWE-Other	CVE-2005-4322	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349894	-	hitachi	cosminexus_collaboration_portal groupmax_collaboration_portal groupmax_collaboration_web_client	Unspecified vulnerability in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through …	NVD-CWE-Other	CVE-2005-4323	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349895	-	driverse	driverse	Multiple unspecified vulnerabilities in Driverse before 0.56b have unknown impact and attack vectors, related to (1) a "ptrace exploit" and (2) "some other potential security problems."	NVD-CWE-Other	CVE-2005-4325	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349896	-	apc	powerchute_network_shutdown	The web interface for American Power Conversion (APC) PowerChute Network Shutdown performs all communication in cleartext (base64-encoded), which allows remote attackers to sniff authentication crede…	NVD-CWE-Other	CVE-2005-4326	2017-07-20 10:29	2005-12-17	Show	GitHub Exploit DB Packet Storm

349897	-	anthony_boyd	phpbb_blog	Invalid SQL syntax error in blog.php in phpBB Blog 2.2.2 and earlier allows remote attackers to obtain the full path of the application via an invalid permalink parameter to index.php, which produces…	NVD-CWE-Other	CVE-2005-4346	2017-07-20 10:29	2005-12-19	Show	GitHub Exploit DB Packet Storm

349898	-	dragonfly freebsd linux openbsd	dragonfly freebsd linux_kernel openbsd	The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files by mounting another…	NVD-CWE-Other	CVE-2005-4351	2017-07-20 10:29	2005-12-31	Show	GitHub Exploit DB Packet Storm

349899	-	box_uk	amaxus	Directory traversal vulnerability in Amaxus 3 and earlier allows remote attackers to access arbitrary files via ".." sequences in the change parameter.	NVD-CWE-Other	CVE-2005-4376	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm

349900	-	-	-	Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the (1) sort_mode parameter to (a) fisheye/list_g…	NVD-CWE-Other	CVE-2005-4379	2017-07-20 10:29	2005-12-20	Show	GitHub Exploit DB Packet Storm