Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1201 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42444 2026-05-20 13:30 2026-05-12 Show GitHub Exploit DB Packet Storm
1202 4.3 警告
Network 		mintplexlabs anythingllm mintplexlabsのanythingllmにおける複数の脆弱性 CWE-200
CWE-639
CWE-639
CVE-2026-42456 2026-05-20 13:30 2026-05-8 Show GitHub Exploit DB Packet Storm
1203 6.1 警告
Network 		Gofiber Fiber GofiberのFiberにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42554 2026-05-20 13:29 2026-05-11 Show GitHub Exploit DB Packet Storm
1204 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42556 2026-05-20 13:29 2026-05-8 Show GitHub Exploit DB Packet Storm
1205 7.5 重要
Network 		Netty Netty Nettyにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性 CWE-772
有効なライフタイム後のリソースの解放の欠如 		CVE-2026-42577 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1206 7.5 重要
Network 		Netty Netty NettyにおけるHTTP レスポンス分割に関する脆弱性 CWE-113
HTTP レスポンスの分割 		CVE-2026-42578 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1207 9.1 緊急
Network 		Netty Netty Nettyにおける複数の脆弱性 CWE-20
CWE-400
CWE-626
CVE-2026-42579 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1208 6.5 警告
Network 		Netty Netty Nettyにおける複数の脆弱性 CWE-190
CWE-444
CVE-2026-42580 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1209 9.8 緊急
Network 		Netty Netty NettyにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-42581 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
1210 7.5 重要
Network 		Netty Netty Nettyにおける複数の脆弱性 CWE-770
CWE-789
CVE-2026-42582 2026-05-20 13:29 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2661 8.2 HIGH
Network 		- - Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET … CWE-89
SQL Injection 		CVE-2018-25341 2026-05-27 04:47 2026-05-24 Show GitHub Exploit DB Packet Storm
2662 8.2 HIGH
Network 		- - Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'searched' parameter in sear… CWE-89
SQL Injection 		CVE-2018-25342 2026-05-27 04:47 2026-05-24 Show GitHub Exploit DB Packet Storm
2663 8.2 HIGH
Network 		- - Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the usernam… CWE-89
SQL Injection 		CVE-2018-25351 2026-05-27 04:47 2026-05-24 Show GitHub Exploit DB Packet Storm
2664 8.4 HIGH
Local 		- - Splinterware System Scheduler Pro 5.12 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by modifying service executable files. Attackers can … CWE-276
Incorrect Default Permissions  		CVE-2018-25359 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2665 8.4 HIGH
Local 		- - AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured ex… CWE-121
Stack-based Buffer Overflow 		CVE-2018-25360 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2666 6.8 MEDIUM
Local 		- - Soroush IM Desktop App 0.17.0 contains an authentication bypass vulnerability that allows local attackers to remove passcodes by injecting pre-encrypted database entries using a constant encryption k… CWE-290
 Authentication Bypass by Spoofing 		CVE-2018-25361 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2667 8.2 HIGH
Network 		- - Twitter-Clone 1 contains a SQL injection vulnerability in follow.php that allows attackers to manipulate database queries by injecting SQL code through the userid parameter. Attackers can submit unio… CWE-89
SQL Injection 		CVE-2018-25362 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2668 4.3 MEDIUM
Network 		- - Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms t… CWE-352
 Origin Validation Error 		CVE-2018-25363 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2669 8.2 HIGH
Network 		- - Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the name parameter. Attackers can sub… CWE-89
SQL Injection 		CVE-2018-25364 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm
2670 7.5 HIGH
Network 		- - PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. Attackers can use pat… CWE-22
Path Traversal 		CVE-2018-25365 2026-05-27 04:47 2026-05-26 Show GitHub Exploit DB Packet Storm