Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1831 9.8 緊急
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-28474 2026-05-8 12:08 2026-03-5 Show GitHub Exploit DB Packet Storm
1832 9.8 緊急
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-28780 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
1833 7.3 重要
Network
Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-29168 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
1834 4.3 警告
Network
Mozilla Foundation Mozilla Firefox Focus Mozilla FoundationのMozilla Firefox Focusにおけるユーザインターフェースにおける重要情報の誤った表示に関する脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示
CVE-2026-2919 2026-05-8 12:08 2026-03-9 Show GitHub Exploit DB Packet Storm
1835 7.5 重要
Network
OWASP ModSecurity OWASPのModSecurityにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-30923 2026-05-8 12:08 2026-05-5 Show GitHub Exploit DB Packet Storm
1836 8.8 重要
Network
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-31450 2026-05-8 12:08 2026-04-22 Show GitHub Exploit DB Packet Storm
1837 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション
CVE-2026-31451 2026-05-8 12:07 2026-04-22 Show GitHub Exploit DB Packet Storm
1838 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-31452 2026-05-8 12:07 2026-04-22 Show GitHub Exploit DB Packet Storm
1839 7.8 重要
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-31453 2026-05-8 12:07 2026-04-22 Show GitHub Exploit DB Packet Storm
1840 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-31454 2026-05-8 12:07 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346681 - invision_power_services invision_community_blog Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encod… NVD-CWE-Other
CVE-2005-1945 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346682 - invision_power_services invision_community_blog Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to an editentry, replyentry, or editcomme… NVD-CWE-Other
CVE-2005-1946 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346683 - invision_power_services invision_gallery Multiple SQL injection vulnerabilities in Invision Gallery before 1.3.1 allow remote attackers to execute arbitrary SQL commands via (1) the comment parameter in an editcomment action or (2) the rati… NVD-CWE-Other
CVE-2005-1948 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346684 - darryl_burgdorf webhints hints.pl in Webhints 1.03 allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. NVD-CWE-Other
CVE-2005-1950 2016-10-18 12:23 2005-06-9 Show GitHub Exploit DB Packet Storm
346685 - oscommerce oscommerce Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences … NVD-CWE-Other
CVE-2005-1951 2016-10-18 12:23 2005-06-16 Show GitHub Exploit DB Packet Storm
346686 - pico_server pico_server Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequen… NVD-CWE-Other
CVE-2005-1952 2016-10-18 12:23 2005-06-16 Show GitHub Exploit DB Packet Storm
346687 - pico_server pico_server Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. NVD-CWE-Other
CVE-2005-1953 2016-10-18 12:23 2005-06-11 Show GitHub Exploit DB Packet Storm
346688 - singapore singapore singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (2) any .tpl.php file in templates/admin_default/, or (3) any .tpl.php file in te… NVD-CWE-Other
CVE-2005-1954 2016-10-18 12:23 2005-06-16 Show GitHub Exploit DB Packet Storm
346689 - singapore singapore Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.11 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. NVD-CWE-Other
CVE-2005-1955 2016-10-18 12:23 2005-06-12 Show GitHub Exploit DB Packet Storm
346690 - file_upload_manager file_upload_manager File Upload Manager allows remote attackers to upload arbitrary files by modifying the test variable to contain a value of '~~~~~~' (six tildes), which bypasses the file extension checks. NVD-CWE-Other
CVE-2005-1956 2016-10-18 12:23 2005-06-12 Show GitHub Exploit DB Packet Storm