Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2511 8.2 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-34064 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2512 7.5 重要
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-252
CWE-755
CVE-2026-34065 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2513 5.3 警告
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における複数の脆弱性 CWE-20
CWE-617
CWE-754
CVE-2026-34066 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2514 6.5 警告
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-34067 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2515 6.8 警告
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-34068 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2516 5.3 警告
Network 		Nimiq Nimiq Proof of Stake (core-rs-albatross) NimiqのNimiq Proof of Stake (core-rs-albatross)における到達可能なアサーションに関する脆弱性 CWE-617
到達可能なアサーション 		CVE-2026-34069 2026-04-27 11:18 2026-04-14 Show GitHub Exploit DB Packet Storm
2517 5.9 警告
Network 		leancrypto leancrypto leancryptoにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り 		CVE-2026-34610 2026-04-27 11:18 2026-04-2 Show GitHub Exploit DB Packet Storm
2518 7.1 重要
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-35341 2026-04-27 11:18 2026-04-22 Show GitHub Exploit DB Packet Storm
2519 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるキャッチされない例外に関する脆弱性 CWE-248
キャッチされない例外 		CVE-2026-35348 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
2520 6.6 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパーミッションの不適切な保持に関する脆弱性 CWE-281
パーミッションの不適切な保持 		CVE-2026-35350 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315881 - mike_helton aoblogger create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1. NVD-CWE-Other
CVE-2006-0312 2024-02-14 10:17 2006-01-19 Show GitHub Exploit DB Packet Storm
315882 - ca
broadcom 		unicenter_remote_control
brightstor_mobile_backup
brightstor_arcserve_backup_laptops_desktops
business_protection_suite
desktop_protection_suite
server_protection_suite 		The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1… CWE-399
 Resource Management Errors 		CVE-2006-0306 2024-02-14 10:17 2006-01-19 Show GitHub Exploit DB Packet Storm
315883 - carnegie_mellon_university snmptrapd Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162. NVD-CWE-Other
CVE-2006-0250 2024-02-14 10:17 2006-01-18 Show GitHub Exploit DB Packet Storm
315884 - helm_hosting helm_hosting_control_panel Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the txtEmailAddress p… NVD-CWE-Other
CVE-2006-0211 2024-02-14 10:17 2006-01-14 Show GitHub Exploit DB Packet Storm
315885 - postnuke_software_foundation
john_lim
the_cacti_group
mantis
moodle
mediabeez 		postnuke
adodb
cacti
mantis
moodle
mediabeez 		The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8… CWE-89
SQL Injection 		CVE-2006-0146 2024-02-14 10:17 2006-01-10 Show GitHub Exploit DB Packet Storm
315886 - dave_carrigan auth_ldap Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the … CWE-134
Use of Externally-Controlled Format String 		CVE-2006-0150 2024-02-14 10:17 2006-01-10 Show GitHub Exploit DB Packet Storm
315887 - - - Cross-site scripting (XSS) vulnerability in WebHost Automation Ltd Helm before 3.2.6 allows remote attackers to inject arbitrary web script or HTML via unknown vectors involving the default page. NVD-CWE-Other
CVE-2005-4747 2024-02-14 10:17 2005-12-31 Show GitHub Exploit DB Packet Storm
315888 - neocrome land_down_under Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbitrary SQL commands via parameters including (1) the m parameter in auth.php, (2)… NVD-CWE-Other
CVE-2005-4821 2024-02-14 10:17 2005-12-31 Show GitHub Exploit DB Packet Storm
315889 - ethereal_group ethereal Unspecified vulnerability in the GTP dissector for Ethereal 0.9.1 to 0.10.13 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. NVD-CWE-noinfo
CVE-2005-4585 2024-02-14 10:17 2005-12-29 Show GitHub Exploit DB Packet Storm
315890 - clearswift mimesweeper_for_web Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file. NVD-CWE-Other
CVE-2005-4526 2024-02-14 10:17 2005-12-28 Show GitHub Exploit DB Packet Storm