Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
691 9.1 緊急
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-25199 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
692 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-138
特殊要素の不適切な無害化 		CVE-2026-26129 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
693 7.5 重要
Network 		マイクロソフト Microsoft 365 Copilot BizChat M365 Copilot の情報漏えいの脆弱性 CWE-74
インジェクション 		CVE-2026-26164 2026-05-11 11:12 2026-05-7 Show GitHub Exploit DB Packet Storm
694 9.8 緊急
Network 		vm2 project vm2 vm2 projectのvm2における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-26956 2026-05-11 11:12 2026-05-4 Show GitHub Exploit DB Packet Storm
695 6.5 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和 		CVE-2026-27644 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
696 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-27693 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
697 5.4 警告
Network 		Traccar Ltd Traccar Traccar LtdのTraccarにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-27694 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
698 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31753 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
699 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31754 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
700 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31755 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346421 - unu_networks mailgust SQL injection vulnerability in MailGust 1.9 allows remote attackers to execute arbitrary SQL commands via the email field on the password reminder page. NVD-CWE-Other
CVE-2005-3063 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346422 - cmsmadesimple cms_made_simple Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter. NVD-CWE-Other
CVE-2005-3083 2016-10-18 12:32 2005-09-28 Show GitHub Exploit DB Packet Storm
346423 - mantis mantis Cross-site scripting (XSS) vulnerability in bug_actiongroup_page.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the summary of the bug, whic… NVD-CWE-Other
CVE-2005-3090 2016-10-18 12:32 2005-09-29 Show GitHub Exploit DB Packet Storm
346424 - image-line_software fl_studio Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a (1) .mid or (2) .wav file. NVD-CWE-Other
CVE-2005-3092 2016-10-18 12:32 2005-09-29 Show GitHub Exploit DB Packet Storm
346425 - nateon nateon_messenger The ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to download and execute arbitrary programs by setting the arguments to the GotNate.Excute method. NVD-CWE-Other
CVE-2005-3113 2016-10-18 12:32 2005-09-30 Show GitHub Exploit DB Packet Storm
346426 - nateon nateon_messenger Buffer overflow in the ActiveX control for NateOn Messenger (NateonDownloadManager.ocx) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long thi… NVD-CWE-Other
CVE-2005-3114 2016-10-18 12:32 2005-09-30 Show GitHub Exploit DB Packet Storm
346427 - lucidcms lucidcms SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field. NVD-CWE-Other
CVE-2005-3130 2016-10-18 12:32 2005-10-5 Show GitHub Exploit DB Packet Storm
346428 - icewarp
merak 		web_mail
mail_server 		Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HT… NVD-CWE-Other
CVE-2005-3131 2016-10-18 12:32 2005-10-5 Show GitHub Exploit DB Packet Storm
346429 - icewarp
merak 		web_mail
mail_server 		MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the… NVD-CWE-Other
CVE-2005-3132 2016-10-18 12:32 2005-10-5 Show GitHub Exploit DB Packet Storm
346430 - icewarp
merak 		web_mail
mail_server 		Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directori… NVD-CWE-Other
CVE-2005-3133 2016-10-18 12:32 2005-10-5 Show GitHub Exploit DB Packet Storm