Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
7031 5.5 警告
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における不十分な制御フロー管理に関する脆弱性 CWE-691
不十分な制御フロー管理 		CVE-2026-5938 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7032 5.5 警告
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-5939 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7033 5.5 警告
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-5940 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7034 7.1 重要
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-5941 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7035 5.5 警告
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-5942 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7036 7.8 重要
Local 		Foxit pdf editor
pdf reader 		Foxitのpdf editor等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-5943 2026-05-1 10:43 2026-04-27 Show GitHub Exploit DB Packet Storm
7037 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. ch22 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-5962 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
7038 9.8 緊急
Network 		MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 fix: isolate Test.exec_code() namespace and subprocess to prevent CWE-95 code injection via globals() leak by sebastiondev&n…
CVE-2026-5970 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
7039 9.8 緊急
Network 		MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-5971 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
7040 9.8 緊急
Network 		MetaGPT MetaGPT MetaGPTにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-5972 2026-05-1 10:43 2026-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
360171 - interactivephp fusionbb Multiple SQL injection vulnerabilities in InteractivePHP FusionBB .11 Beta and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username, which is not properly handled by … NVD-CWE-Other
CVE-2005-1972 2008-09-6 05:50 2005-06-13 Show GitHub Exploit DB Packet Storm
360172 - annuaire 1two Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) si… NVD-CWE-Other
CVE-2005-1975 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm
360173 - novell netmail Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cau… NVD-CWE-Other
CVE-2005-1976 2008-09-6 05:50 2005-12-31 Show GitHub Exploit DB Packet Storm
360174 - edgewall_software trac Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachmen… NVD-CWE-Other
CVE-2005-2007 2008-09-6 05:50 2005-06-19 Show GitHub Exploit DB Packet Storm
360175 - symantec norton_antivirus Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerabili… NVD-CWE-Other
CVE-2005-2017 2008-09-6 05:50 2005-08-30 Show GitHub Exploit DB Packet Storm
360176 - freebsd freebsd ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while perfor… NVD-CWE-Other
CVE-2005-2019 2008-09-6 05:50 2005-07-5 Show GitHub Exploit DB Packet Storm
360177 - cpanel cpanel Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page. NVD-CWE-Other
CVE-2005-2021 2008-09-6 05:50 2005-06-20 Show GitHub Exploit DB Packet Storm
360178 - vipul razor-agents Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type. NVD-CWE-Other
CVE-2005-2024 2008-09-6 05:50 2005-06-17 Show GitHub Exploit DB Packet Storm
360179 - enterasys vertical_horizon-2402s Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges. NVD-CWE-Other
CVE-2005-2026 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm
360180 - enterasys vertical_horizon-2402s Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information … NVD-CWE-Other
CVE-2005-2027 2008-09-6 05:50 2005-06-16 Show GitHub Exploit DB Packet Storm