Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2131 6.5 警告
Network 		Apache Software Foundation Apache Storm Apache Software FoundationのApache Stormにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-41081 2026-04-30 11:02 2026-04-27 Show GitHub Exploit DB Packet Storm
2132 7.5 重要
Network 		SQLAlchemy mako SQLAlchemyのmakoにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41205 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2133 7.8 重要
Local 		Tommaso Bona (ParzivalHack) PySpector Tommaso Bona (ParzivalHack)のPySpectorにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41206 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2134 6.1 警告
Network 		cure53 DOMPurify cure53のDOMPurifyにおける複数の脆弱性 CWE-183
CWE-79
CVE-2026-41240 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2135 5.4 警告
Network 		pretalx pretalx pretalxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41241 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2136 8.1 重要
Network 		Project Contour Contour Project ContourのContourにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41246 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2137 9.8 緊急
Network 		std42 elfinder std42のelfinderにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-41247 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2138 7.5 重要
Network 		joinmastodon Mastodon joinmastodonのMastodonにおける行動ワークフローに関する脆弱性 CWE-841
行動ワークフローの不適切な実施 		CVE-2026-41259 2026-04-30 11:01 2026-04-23 Show GitHub Exploit DB Packet Storm
2139 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41327 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
2140 9.1 緊急
Network 		dgraph dgraph dgraphにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化 		CVE-2026-41328 2026-04-30 11:01 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347361 - coastal_data_management e-quick_cart Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shoppr… NVD-CWE-Other
CVE-2005-3735 2011-03-8 11:27 2005-11-22 Show GitHub Exploit DB Packet Storm
347362 - inkscape inkscape Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values. NVD-CWE-Other
CVE-2005-3737 2011-03-8 11:27 2005-11-22 Show GitHub Exploit DB Packet Storm
347363 - - - Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors. NVD-CWE-Other
CVE-2005-3739 2011-03-8 11:27 2005-11-22 Show GitHub Exploit DB Packet Storm
347364 - php_fusion php_fusion Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited par… NVD-CWE-Other
CVE-2005-3740 2011-03-8 11:27 2005-11-22 Show GitHub Exploit DB Packet Storm
347365 - advanced_poll advanced_poll Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter. NVD-CWE-Other
CVE-2005-3742 2011-03-8 11:27 2005-11-22 Show GitHub Exploit DB Packet Storm
347366 - ibm websphere_application_server Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND). CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-3760 2011-03-8 11:27 2005-11-23 Show GitHub Exploit DB Packet Storm
347367 - symantec enterprise_firewall
firewall_vpn_appliance_100
firewall_vpn_appliance_200
gateway_security_300
gateway_security_400
gateway_security_5000_series
gateway_security_5100
gateway_sec… 		Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,… NVD-CWE-Other
CVE-2005-3768 2011-03-8 11:27 2005-11-23 Show GitHub Exploit DB Packet Storm
347368 - joomla joomla Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) "GET and other variables" and (2) "SEF". NVD-CWE-Other
CVE-2005-3771 2011-03-8 11:27 2005-11-23 Show GitHub Exploit DB Packet Storm
347369 - joomla joomla Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component file management functions." NVD-CWE-Other
CVE-2005-3773 2011-03-8 11:27 2005-11-23 Show GitHub Exploit DB Packet Storm
347370 - ipupdate ipupdate Multiple buffer overflows in IPUpdate 1.1 might allow attackers to execute arbitrary code via (1) memmcat in the memm module or (2) certain TSIG format records. NVD-CWE-Other
CVE-2005-3780 2011-03-8 11:27 2005-11-23 Show GitHub Exploit DB Packet Storm