Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1731 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月21日） - - 2026-04-23 17:41 2026-04-22 Show GitHub Exploit DB Packet Storm
1732 8.8 重要
Network 		サイレックス・テクノロジー株式会社 SD-330AC
AMC Manager 		サイレックス・テクノロジー製SD-330ACおよびAMC Managerにおける複数の脆弱性 CWE-1188
CWE-121
CWE-122
CWE-1395
CWE-226
CWE-266
CWE-306
CWE-321
CWE-327
CWE-79
CWE-93
CVE-2015-5621
CVE-2024-24487
CVE-2026-32955
CVE-2026-32956
CVE-2026-32957
CVE-2026-32958
CVE-2026-32959
CVE-2026-32960
CVE-2026-32961
CVE-2026-32962
CVE-2026-32963
CV… 		2026-04-23 17:36 2026-04-20 Show GitHub Exploit DB Packet Storm
1733 7.5 重要
Network 		株式会社GROWI GROWI GROWIにおける、正規表現を用いたサービス運用妨害（ReDoS）の脆弱性 CWE-Other
その他 		CVE-2026-41040 2026-04-23 15:16 2026-04-23 Show GitHub Exploit DB Packet Storm
1734 8.8 重要
Network 		一般社団法人 JPCERT コーディネーションセンター LogonTracer LogonTracerにおける複数の脆弱性 CWE-78
CWE-Other
CVE-2026-33277
CVE-2026-33566 		2026-04-23 14:12 2026-04-23 Show GitHub Exploit DB Packet Storm
1735 7.3 重要
Local 		i-PRO株式会社 IP簡単設定ソフトウェア i-PRO製IP簡単設定ソフトウェアにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-34488 2026-04-23 12:21 2026-04-23 Show GitHub Exploit DB Packet Storm
1736 4.7 警告
Network 		彼方株式会社 CMS ALAYA CMS ALAYAにおけるSQLインジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-40529 2026-04-23 12:07 2026-04-23 Show GitHub Exploit DB Packet Storm
1737 10 緊急
Network 		Quest Software Inc. KACE Systems Management Appliance Quest Software Inc.のKACE Systems Management Applianceにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-32975 2026-04-23 10:17 2025-06-24 Show GitHub Exploit DB Packet Storm
1738 7.5 重要
Network 		jsonparser project jsonparser jsonparser projectのjsonparserにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-32285 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
1739 7.5 重要
Network 		antchfx Xpath antchfxのXpathにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-32287 2026-04-23 10:17 2026-03-26 Show GitHub Exploit DB Packet Storm
1740 5.5 警告
Local 		Direct-Soft Inc. WinMPG Video Convert Direct-Soft Inc.のWinMPG Video Convertにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25644 2026-04-23 10:17 2026-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314181 - guillaumegardey biborb Cross-site scripting (XSS) vulnerability in bibindex.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the search parameter. CWE-79
Cross-site Scripting 		CVE-2005-0251 2024-02-3 01:42 2005-05-2 Show GitHub Exploit DB Packet Storm
314182 7.0 HIGH
Local 		linux
opensuse
suse
debian 		linux_kernel
opensuse
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_high_availability_extension
debian_linux 		Race condition in the find_keyring_by_name function in security/keys/keyring.c in the Linux kernel 2.6.34-rc5 and earlier allows local users to cause a denial of service (memory corruption and system… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2010-1437 2024-02-3 01:38 2010-05-8 Show GitHub Exploit DB Packet Storm
314183 - postgresql
trustix
mandrakesoft
redhat 		postgresql
secure_linux
mandrake_linux_corporate_server
enterprise_linux_desktop
enterprise_linux
mandrake_linux 		The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0977 2024-02-3 01:33 2005-02-9 Show GitHub Exploit DB Packet Storm
314184 9.8 CRITICAL
Network 		mit
openpkg
debian 		kerberos_5
openpkg
debian_linux 		Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code. CWE-415
 Double Free 		CVE-2004-0772 2024-02-3 00:27 2004-10-20 Show GitHub Exploit DB Packet Storm
314185 - mit
debian
redhat 		kerberos_5
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server 		Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow… CWE-415
 Double Free 		CVE-2004-0642 2024-02-3 00:27 2004-09-28 Show GitHub Exploit DB Packet Storm
314186 9.8 CRITICAL
Network 		mit
apple
debian 		kerberos_5
mac_os_x_server
mac_os_x
debian_linux 		Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. CWE-415
 Double Free 		CVE-2005-1689 2024-02-3 00:24 2005-07-18 Show GitHub Exploit DB Packet Storm
314187 7.8 HIGH
Local 		microsoft outlook
internet_explorer
windows_xp
windows_server_2003
windows_98
windows_me
windows_98se
windows_nt 		Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image. CWE-415
 Double Free 		CVE-2003-1048 2024-02-3 00:23 2004-07-27 Show GitHub Exploit DB Packet Storm
314188 9.8 CRITICAL
Network 		openssl openssl Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 … CWE-415
 Double Free 		CVE-2003-0545 2024-02-3 00:23 2003-11-17 Show GitHub Exploit DB Packet Storm
314189 7.5 HIGH
Network 		gnome gtk Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. CWE-415
 Double Free 		CVE-2005-0891 2024-02-3 00:22 2005-05-2 Show GitHub Exploit DB Packet Storm
314190 9.8 CRITICAL
Network 		zlib zlib The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow … CWE-415
 Double Free 		CVE-2002-0059 2024-02-3 00:16 2002-03-15 Show GitHub Exploit DB Packet Storm