Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6481 9 緊急
Network
GeoVision GV-VMS Firmware GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-7372 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
6482 7.8 重要
Local
Zurich Instruments LabOne Q Zurich InstrumentsのLabOne Qにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-7584 2026-05-7 11:31 2026-05-1 Show GitHub Exploit DB Packet Storm
6483 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. W308R Firmware Shenzhen Tenda Technology Co.,Ltd.のW308R Firmwareにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2018-25316 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
6484 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. W3002R Firmware
A302 Firmware
W309R Firmware
Shenzhen Tenda Technology Co.,Ltd.のA302 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2018-25317 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
6485 9.8 緊急
Network
Shenzhen Tenda Technology Co.,Ltd. FH303 Firmware
A300 Firmware
Shenzhen Tenda Technology Co.,Ltd.のA300 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2018-25318 2026-05-7 11:31 2026-04-29 Show GitHub Exploit DB Packet Storm
6486 9.8 緊急
Network
DeanWu (pylixm) Django-mdeditor DeanWu (pylixm)のDjango-mdeditorにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2025-13030 2026-05-7 11:31 2026-04-30 Show GitHub Exploit DB Packet Storm
6487 7.8 重要
Local
The Qt Company qtdeclarative The Qt Companyのqtdeclarativeにおける複数の脆弱性 CWE-20
CWE-94
CWE-94
CVE-2025-14576 2026-05-7 11:30 2026-04-30 Show GitHub Exploit DB Packet Storm
6488 6.4 警告
Local
レッドハット OpenShift Update Service (OSUS) レッドハットのOpenShift Update Service (OSUS)における不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション
CVE-2025-57854 2026-05-7 11:30 2026-04-8 Show GitHub Exploit DB Packet Storm
6489 5.4 警告
Network
Wolters Kluwer Financial Services, Inc. LEX Baza Dokumentow Wolters Kluwer Financial Services, Inc.のLEX Baza Dokumentowにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-1493 2026-05-7 11:30 2026-04-30 Show GitHub Exploit DB Packet Storm
6490 5.7 警告
Adjacent
シスコシステムズ Firepower Threat Defense (FTD)
Adaptive Security Appliance (ASA) Software
シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-20020 2026-05-7 11:30 2026-03-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349821 - gadu-gadu gadu-gadu_instant_messenger Gadu-Gadu 7.20 does not properly handle MS-DOS device names in filenames, which allows remote attackers to (1) cause a denial of service (hang) via an image filename of AUX: sent twice (hang), or (2)… NVD-CWE-Other
CVE-2005-3887 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349822 - gadu-gadu gadu-gadu_instant_messenger It appears to only affects 7.x versions. NVD-CWE-Other
CVE-2005-3887 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349823 - gadu-gadu gadu-gadu_instant_messenger Memory leak in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code other than 2 and a large size field, which allocates memory for the packet but … NVD-CWE-Other
CVE-2005-3888 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349824 - gadu-gadu gadu-gadu_instant_messenger This vulnerability probably affects all 7.x versions of Gadu-Gadu prior to 7.20. NVD-CWE-Other
CVE-2005-3888 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349825 - - - Gadu-Gadu 7.20 allows remote attackers to cause a denial of service via multiple DCC packets with a code of 6 or 7, which triggers a large number of popup windows to the user and creates a large numb… NVD-CWE-Other
CVE-2005-3889 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349826 - gadu-gadu gadu-gadu_instant_messenger Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash and configuration loss) via a page with a large number of gg: URIs. NVD-CWE-Other
CVE-2005-3890 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349827 - gadu-gadu gadu-gadu_instant_messenger Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote attackers to cause a denial of service (crash) via an image filename between exactly 192 to 200 characters, which does not account for the … NVD-CWE-Other
CVE-2005-3891 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349828 - otrs otrs Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass… NVD-CWE-Other
CVE-2005-3893 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349829 - otrs otrs Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary w… NVD-CWE-Other
CVE-2005-3894 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm
349830 - otrs otrs Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue… NVD-CWE-Other
CVE-2005-3895 2017-07-20 10:29 2005-11-30 Show GitHub Exploit DB Packet Storm