Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1851	4.9	警告 Network	フォーティネット	Fortiweb	フォーティネットのFortiwebにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-39811	2026-04-23 10:11	2026-04-14	Show	GitHub Exploit DB Packet Storm

1852	4.8	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-39812	2026-04-23 10:11	2026-04-14	Show	GitHub Exploit DB Packet Storm

1853	6.7	警告 Local	フォーティネット	Fortiweb	フォーティネットのFortiwebにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-39814	2026-04-23 10:11	2026-04-14	Show	GitHub Exploit DB Packet Storm

1854	4.1	警告 Network	Weblate	Weblate	Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39845	2026-04-23 10:11	2026-04-15	Show	GitHub Exploit DB Packet Storm

1855	5.9	警告 Network	axios project	axios	axios projectのaxiosにおける複数の脆弱性	CWE-400 CWE-662	CVE-2026-39865	2026-04-23 10:11	2026-04-8	Show	GitHub Exploit DB Packet Storm

1856	6.1	警告 Local	jqlang	jq	jqlangのjqにおける複数の脆弱性	CWE-125 CWE-476 CWE-843	CVE-2026-39956	2026-04-23 10:11	2026-04-13	Show	GitHub Exploit DB Packet Storm

1857	7.2	重要 Network	citeum	opencti	citeumのopenctiにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-39980	2026-04-23 10:11	2026-04-9	Show	GitHub Exploit DB Packet Storm

1858	6.1	警告 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-39985	2026-04-23 10:11	2026-04-9	Show	GitHub Exploit DB Packet Storm

1859	5.3	警告 Network	Apache Software Foundation	Apache Log4cxx	Apache Software FoundationのApache Log4cxxにおけるエンコードおよびエスケープに関する脆弱性	CWE-116 不適切なエンコード、または出力のエスケープ	CVE-2026-40023	2026-04-23 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

1860	4.8	警告 Network	axios project	axios	axios projectのaxiosにおける複数の脆弱性	CWE-113 CWE-444 CWE-918	CVE-2026-40175	2026-04-23 10:11	2026-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314261	-	x-ways_software_technology_ag	winhex	Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the comman…	NVD-CWE-Other	CVE-2005-1187	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314262	-	ecommerce-carts	ecommpro	SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field.	NVD-CWE-Other	CVE-2005-1221	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314263	-	oneworldstore	oneworldstore	OneWorldStore allows remote attackers to cause a denial of service (application crash) via a direct request to owConnections/chksettings.asp.	NVD-CWE-Other	CVE-2005-1328	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314264	-	oneworldstore	oneworldstore	owOfflineCC.asp in OneWorldStore allows remote attackers to obtain sensitive information by modifying the idOrder parameter.	NVD-CWE-Other	CVE-2005-1329	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314265	-	adobe	acrobat_reader	UNVERIFIABLE NOTE: this issue describes a problem that can not be independently verified as of 20050421. Adobe Acrobat reader (AcroRd32.exe) 6.0 and earlier allows remote attackers to cause a…	NVD-CWE-Other	CVE-2005-1347	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314266	-	mailenable	mailenable_enterprise mailenable_professional	Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.	NVD-CWE-Other	CVE-2005-1348	2024-02-14 10:17	2005-05-2	Show	GitHub Exploit DB Packet Storm

314267	-	phpbb_group	phpbb	Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by upload…	NVD-CWE-Other	CVE-2005-1047	2024-02-14 10:17	2005-04-7	Show	GitHub Exploit DB Packet Storm

314268	-	tarantella	tarantella_enterprise secure_global_desktop	Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30, when using RSA SecurID and multiple users have the same username, reveals sensitive infor…	NVD-CWE-Other	CVE-2005-0486	2024-02-14 10:17	2005-03-30	Show	GitHub Exploit DB Packet Storm

314269	-	ethereal_group	ethereal	Unknown vulnerability in the JXTA dissector in Ethereal 0.10.9 allows remote attackers to cause a denial of service (application crash).	NVD-CWE-Other	CVE-2005-0765	2024-02-14 10:17	2005-03-12	Show	GitHub Exploit DB Packet Storm

314270	-	conectiva ethereal_group redhat altlinux	linux ethereal enterprise_linux enterprise_linux_desktop linux_advanced_workstation alt_linux	Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via …	NVD-CWE-Other	CVE-2005-0699	2024-02-14 10:17	2005-03-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed