Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2211	8.8	重要 Network	CloudARK	KubePlus	CloudARKのKubePlusにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-29955	2026-05-7 12:06	2026-04-13	Show	GitHub Exploit DB Packet Storm

2212	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける領域間での誤ったリソース移動に関する脆弱性	CWE-669 領域間での誤ったリソース移動	CVE-2026-31431	2026-05-7 12:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

2213	5.3	警告 Network	レッドハット kernel.org	util-linux Red Hat Hardened Images	kernel.org等の複数ベンダの製品における代替名による認証回避に関する脆弱性	CWE-289 代替名による認証回避	CVE-2026-3184	2026-05-7 12:06	2026-04-3	Show	GitHub Exploit DB Packet Storm

2214	5.5	警告 Local	Electron	electron	Electronのelectronにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-34764	2026-05-7 12:06	2026-04-6	Show	GitHub Exploit DB Packet Storm

2215	10	緊急 Network	traefik	traefik	traefikにおけるデータの信頼性についての不十分な検証に関する脆弱性	CWE-345 データの信頼性についての不十分な検証	CVE-2026-35051	2026-05-7 12:06	2026-04-30	Show	GitHub Exploit DB Packet Storm

2216	7.1	重要 Network	デル	iDRAC10 Firmware	デルのiDRAC10 Firmwareにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-35155	2026-05-7 12:06	2026-04-29	Show	GitHub Exploit DB Packet Storm

2217	7.2	重要 Network	Progress Software Corporation	ECS Connection Manager loadmaster Connection Manager for ObjectScale	Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-3517	2026-05-7 12:06	2026-04-20	Show	GitHub Exploit DB Packet Storm

2218	7.2	重要 Network	Progress Software Corporation	ECS Connection Manager loadmaster Connection Manager for ObjectScale	Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-3518	2026-05-7 12:06	2026-04-20	Show	GitHub Exploit DB Packet Storm

2219	7.2	重要 Network	Progress Software Corporation	ECS Connection Manager loadmaster Connection Manager for ObjectScale	Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-3519	2026-05-7 12:06	2026-04-20	Show	GitHub Exploit DB Packet Storm

2220	8.1	重要 Network	FreeBSD	FreeBSD	FreeBSDにおける複数の脆弱性	CWE-122 CWE-130	CVE-2026-35547	2026-05-7 12:06	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351671	-	iatek	siteenable	SQL injection vulnerability in content.asp in SiteEnable allows remote attackers to execute arbitrary SQL commands via the sortby parameter.	NVD-CWE-Other	CVE-2005-1011	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

351672	-	mailenable	imapd	Buffer overflow in MailEnable Imapd (MEIMAP.exe) allows remote attackers to execute arbitrary code via a long LOGIN command.	NVD-CWE-Other	CVE-2005-1015	2008-09-6 05:47	2005-05-2	Show	GitHub Exploit DB Packet Storm

351673	-	f-secure	f-secure_anti-virus f-secure_internet_security f-secure_personal_express internet_gatekeeper	Heap-based buffer overflow in multiple F-Secure Anti-Virus and Internet Security products allows remote attackers to execute arbitrary code via a crafted ARJ archive.	NVD-CWE-Other	CVE-2005-0350	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351674	-	sco	openserver	Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-0351	2008-09-6 05:46	2005-04-7	Show	GitHub Exploit DB Packet Storm

351675	-	microsoft	log_sink_class_activex_control	The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.	NVD-CWE-Other	CVE-2005-0360	2008-09-6 05:46	2005-07-5	Show	GitHub Exploit DB Packet Storm

351676	-	awstats	awstats	awstats.pl in AWStats 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "pluginmode", (2) "loadplugin", or (3) "noloadplugin" parameters.	NVD-CWE-Other	CVE-2005-0362	2008-09-6 05:46	2005-02-9	Show	GitHub Exploit DB Packet Storm

351677	-	awstats	awstats	awstats.pl in AWStats 4.0 and 6.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.	NVD-CWE-Other	CVE-2005-0363	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351678	-	mailreader.com	mailreader.com	Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext mess…	NVD-CWE-Other	CVE-2005-0386	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351679	-	remstats	remstats	remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2005-0387	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

351680	-	remstats	remstats	Unknown vulnerability in the remoteping service in remstats 1.0.13 and earlier allows remote attackers to execute arbitrary commands "due to missing input sanitising."	NVD-CWE-Other	CVE-2005-0388	2008-09-6 05:46	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed