Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6481 4.6 警告
Adjacent 		NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-189
CWE-190
CVE-2026-5476 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
6482 7.8 重要
Local 		IBM IBM Turbonomic Prometurbo agent IBMのIBM Turbonomic Prometurbo agentにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-6389 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6483 5.5 警告
Local 		レッドハット multicluster engine for Kubernetes レッドハットのmulticluster engine for Kubernetesにおける重要な情報の平文保存に関する脆弱性 CWE-312
重要な情報の平文保存 		CVE-2026-7163 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6484 7.2 重要
Network 		Amazon.com, Inc. Amazon ECS container agent Amazon.com, Inc.のAmazon ECS container agentにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-7461 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6485 6.5 警告
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP ServerにおけるHTTPレスポンスの分割に関する脆弱性 CWE-443
CWE-Other
CVE-2026-33523 2026-05-7 11:29 2026-05-4 Show GitHub Exploit DB Packet Storm
6486 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける不適切な短絡評価に関する脆弱性 CWE-768
不適切な短絡評価 		CVE-2026-35378 2026-05-7 11:29 2026-04-22 Show GitHub Exploit DB Packet Storm
6487 7.5 重要
Network 		- 4D SASの4D ServerにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-39847 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6488 9.1 緊急
Network 		rti RTI Connext Professional rtiのRTI Connext ProfessionalにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2025-14543 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6489 7.5 重要
Network 		XWiki CryptPad XWikiのCryptPadにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-51846 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
6490 6.4 警告
Local 		レッドハット process automation manager レッドハットのprocess automation managerにおける不適切なデフォルトパーミッションに関する脆弱性 CWE-276
不適切なデフォルトパーミッション 		CVE-2025-58713 2026-05-7 11:29 2026-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350171 - avi_alkalay notify Avi Alkalay notify program, dated 19 Aug 2001, allows remote attackers to execute arbitrary commands via shell metacharacters in the from parameter. NVD-CWE-Other
CVE-2005-3095 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
350172 - avi_alkalay nslookup.cgi Avi Alkalay nslookup.cgi program, dated 16 June 2002, allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter. NVD-CWE-Other
CVE-2005-3096 2017-07-11 10:33 2005-09-29 Show GitHub Exploit DB Packet Storm
350173 - debian backupninja The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2005-3111 2017-07-11 10:33 2005-09-30 Show GitHub Exploit DB Packet Storm
350174 - symantec_veritas netbackup Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute … NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
350175 - symantec_veritas netbackup Failed exploit attempts may result in a denial-of-service condition. NVD-CWE-Other
CVE-2005-3116 2017-07-11 10:33 2005-11-18 Show GitHub Exploit DB Packet Storm
350176 - antiword antiword The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and … CWE-59
Link Following 		CVE-2005-3126 2017-07-11 10:33 2005-12-31 Show GitHub Exploit DB Packet Storm
350177 - lucidcms lucidcms Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string. NVD-CWE-Other
CVE-2005-3127 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm
350178 - squirrelmail address_add_plugin Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag. NVD-CWE-Other
CVE-2005-3128 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm
350179 - s9y serendipity Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin… NVD-CWE-Other
CVE-2005-3129 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm
350180 - virtools web_player Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename. NVD-CWE-Other
CVE-2005-3136 2017-07-11 10:33 2005-10-5 Show GitHub Exploit DB Packet Storm