Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
101 3.7
Network
PuTTY PuTTY PuTTYにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション
CVE-2026-48852 2026-05-29 11:15 2026-05-25 Show GitHub Exploit DB Packet Storm
102 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 New CWE-862
認証の欠如
CVE-2026-5296 2026-05-29 11:15 2026-05-27 Show GitHub Exploit DB Packet Storm
103 5.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-6713 2026-05-29 11:15 2026-05-27 Show GitHub Exploit DB Packet Storm
104 9.8 緊急
Network
The Perl Foundation Perl The Perl FoundationのPerlにおける整数オーバーフローの発生によるバッファオーバーフローの脆弱性 New CWE-680
整数オーバーフローの発生によるバッファオーバーフロー
CVE-2026-8376 2026-05-29 11:15 2026-05-26 Show GitHub Exploit DB Packet Storm
105 3.7
Network
ADCI solutions Node View Permissions ADCI solutionsのNode View Permissionsにおける例外的な状態のチェックに関する脆弱性 New CWE-754
例外的な状態における不適切なチェック
CVE-2026-8491 2026-05-29 11:15 2026-05-19 Show GitHub Exploit DB Packet Storm
106 9.8 緊急
Network
IBM IBM WebSphere Application Server IBMのIBM WebSphere Application Serverにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-8633 2026-05-29 11:15 2026-05-26 Show GitHub Exploit DB Packet Storm
107 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおける誤って解決された名前や参照の使用に関する脆弱性 New CWE-706
誤って解決された名前や参照の使用
CVE-2026-8716 2026-05-29 11:15 2026-05-27 Show GitHub Exploit DB Packet Storm
108 9.8 緊急
Network
IBM IBM HTTP Server IBMのIBM HTTP Serverにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-9170 2026-05-29 11:15 2026-05-26 Show GitHub Exploit DB Packet Storm
109 5.3 警告
Local
squirrel-lang squirrel squirrel-langのsquirrelにおける複数の脆弱性 New CWE-119
CWE-122
CVE-2026-9541 2026-05-29 11:15 2026-05-26 Show GitHub Exploit DB Packet Storm
110 7.8 重要
Local
OpenVPN Technologies OpenVPN Connect OpenVPN TechnologiesのOpenVPN Connectにおける複数の脆弱性 New CWE-267
CWE-270
CWE-648
CWE-78
CVE-2026-9560 2026-05-29 11:15 2026-05-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318841 - zonelabs zonealarm Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissio… CWE-264
Permissions, Privileges, and Access Controls
CVE-2004-2713 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
318842 - nessus nessus Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue CWE-255
Credentials Management
CVE-2004-2722 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
318843 - php php PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on a server that passes on all methods, such as Apache httpd … NVD-CWE-Other
CVE-2003-0249 2024-08-8 11:15 2003-12-31 Show GitHub Exploit DB Packet Storm
318844 - ibm lotus_domino NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbi… NVD-CWE-Other
CVE-2004-1621 2024-08-8 10:15 2004-10-18 Show GitHub Exploit DB Packet Storm
318845 - khaled_mardam-bey mirc Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that is entered after reaching the DCC Get Folder Dialog. NOTE: this issue has been … NVD-CWE-Other
CVE-2005-4681 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
318846 - turnkey_solutions sunshop_shopping_cart Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to (1) index.php, (2) admin/index.php, and (3) admin/adminindex.php, which execute… NVD-CWE-Other
CVE-2005-4787 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
318847 - - - Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in a query_string to the hom… NVD-CWE-Other
CVE-2005-4780 2024-08-8 09:15 2005-12-31 Show GitHub Exploit DB Packet Storm
318848 - webwasher csm_appliance_suite The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can b… NVD-CWE-Other
CVE-2005-4514 2024-08-8 09:15 2005-12-23 Show GitHub Exploit DB Packet Storm
318849 - lois_software webdb SQL injection vulnerability in WebDB 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search parameters, possibly Search0. NOTE: the vendor has disputed this… CWE-89
SQL Injection
CVE-2005-4515 2024-08-8 09:15 2005-12-23 Show GitHub Exploit DB Packet Storm
318850 - polopoly polopoly Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this… NVD-CWE-Other
CVE-2005-4481 2024-08-8 09:15 2005-12-22 Show GitHub Exploit DB Packet Storm