Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
71 5.4 警告
Network 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows 11 Telnet クライアントの情報漏えいの脆弱性 New CWE-125
境界外読み取り 		CVE-2026-35423 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
72 7.5 重要
Network 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		インターネット キー交換 (IKE) プロトコルのサービス拒否の脆弱性 New CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-35424 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
73 5.4 警告
Network 		Frappe Frappe Frappeにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-3837 2026-05-18 12:15 2026-04-22 Show GitHub Exploit DB Packet Storm
74 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 11 26h1
Microsoft Windows Server 2025 		Windows カーネルの特権の昇格の脆弱性 New CWE-822
信頼性のないポインタデリファレンス 		CVE-2026-40369 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
75 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Microsoft Cryptographic Services の特権の昇格の脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-40377 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
76 6.2 警告
Physics 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind… 		Windows ボリューム マネージャー拡張ドライバーのリモートでコードが実行される脆弱性 New CWE-122
CWE-125
CWE-197
CVE-2026-40380 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
77 7.5 重要
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40902 2026-05-18 12:15 2026-05-12 Show GitHub Exploit DB Packet Storm
78 6.8 警告
Adjacent 		VMware Spring Boot VMwareのSpring Bootにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-40970 2026-05-18 12:15 2026-04-27 Show GitHub Exploit DB Packet Storm
79 9.1 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-40971 2026-05-18 12:15 2026-04-27 Show GitHub Exploit DB Packet Storm
80 9.8 緊急
Network 		VMware Spring Boot VMwareのSpring Bootにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-40974 2026-05-18 12:15 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346411 - proland protector_plus Multiple interpretation error in unspecified versions of Proland Protector Plus 2000 Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR … NVD-CWE-Other
CVE-2005-3235 2016-10-18 12:34 2005-10-14 Show GitHub Exploit DB Packet Storm
346412 - versatilebulletinboard versatilebulletinboard Multiple SQL injection vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) login field, (2) "searc… NVD-CWE-Other
CVE-2005-3259 2016-10-18 12:34 2005-10-20 Show GitHub Exploit DB Packet Storm
346413 - versatilebulletinboard versatilebulletinboard Multiple cross-site scripting (XSS) vulnerabilities in versatileBulletinBoard (vBB) 1.0.0 RC2 allow remote attackers to inject arbitrary web script or HTML via (1) the url parameter in dereferrer.php… NVD-CWE-Other
CVE-2005-3260 2016-10-18 12:34 2005-10-20 Show GitHub Exploit DB Packet Storm
346414 - versatilebulletinboard versatilebulletinboard getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request. NVD-CWE-Other
CVE-2005-3261 2016-10-18 12:34 2005-10-20 Show GitHub Exploit DB Packet Storm
346415 - flatnuke flatnuke Cross-site scripting (XSS) vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to inject arbitrary web script or HTML via the user parameter in a profile operation, a different vuln… NVD-CWE-Other
CVE-2005-3306 2016-10-18 12:34 2005-10-26 Show GitHub Exploit DB Packet Storm
346416 - - - Directory traversal vulnerability in index.php for FlatNuke 2.5.6 allows remote attackers to read arbitrary files via ".." sequences in the (1) user parameter in a profile operation or (2) quale para… NVD-CWE-Other
CVE-2005-3307 2016-10-18 12:34 2005-10-26 Show GitHub Exploit DB Packet Storm
346417 - bmc software_control-m_agent BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2005-3311 2016-10-18 12:34 2005-10-26 Show GitHub Exploit DB Packet Storm
346418 - - - Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation pr… NVD-CWE-Other
CVE-2005-3327 2016-10-18 12:34 2005-10-27 Show GitHub Exploit DB Packet Storm
346419 - punbb punbb PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter. NVD-CWE-Other
CVE-2005-3328 2016-10-18 12:34 2005-10-27 Show GitHub Exploit DB Packet Storm
346420 - rsa authentication_agent_for_web Cross-site scripting (XSS) vulnerability in RSA Authentication Agent for Web 5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter in a GetPic operati… NVD-CWE-Other
CVE-2005-3329 2016-10-18 12:34 2005-10-27 Show GitHub Exploit DB Packet Storm