Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2671 7.2 重要
Network 		GitHub Enterprise Server GitHubのEnterprise ServerにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-4821 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
2672 7.5 重要
Network 		OpenBMB XAgent OpenBMBのXAgentにおける複数の脆弱性 CWE-287
CWE-306
CVE-2026-4959 2026-04-30 10:58 2026-03-27 Show GitHub Exploit DB Packet Storm
2673 5.5 警告
Local 		レッドハット KVM Windows virtio ドライバ
Red Hat Enterprise Linux 		レッドハットのRed Hat Enterprise Linux等の複数製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-5164 2026-04-30 10:58 2026-03-30 Show GitHub Exploit DB Packet Storm
2674 7.8 重要
Local 		レッドハット KVM Windows virtio ドライバ
Red Hat Enterprise Linux 		レッドハットのRed Hat Enterprise Linux等の複数製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス 		CVE-2026-5165 2026-04-30 10:58 2026-03-30 Show GitHub Exploit DB Packet Storm
2675 8.1 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-5188 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
2676 8 重要
Adjacent 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-5295 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
2677 5.4 警告
Adjacent 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-5392 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
2678 9.1 緊急
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-5393 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
2679 4.3 警告
Adjacent 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5448 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
2680 6.5 警告
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-5460 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316611 - calogic calogic PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4… NVD-CWE-Other
CVE-2005-2321 2024-02-14 10:17 2005-07-19 Show GitHub Exploit DB Packet Storm
316612 - microsoft msn_messenger_service Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users … NVD-CWE-Other
CVE-2005-2225 2024-02-14 10:17 2005-07-12 Show GitHub Exploit DB Packet Storm
316613 - tonec_inc. internet_download_manager Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL. NVD-CWE-Other
CVE-2005-2210 2024-02-14 10:17 2005-07-11 Show GitHub Exploit DB Packet Storm
316614 - frozenplague.net plague_news_system SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the cid parameter. NVD-CWE-Other
CVE-2005-2166 2024-02-14 10:17 2005-07-6 Show GitHub Exploit DB Packet Storm
316615 - frozenplague.net plague_news_system Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the cid parameter. NVD-CWE-Other
CVE-2005-2167 2024-02-14 10:17 2005-07-6 Show GitHub Exploit DB Packet Storm
316616 - frozenplague.net plague_news_system delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and shoutbox posts by modifying the id parameter. NVD-CWE-Other
CVE-2005-2168 2024-02-14 10:17 2005-07-6 Show GitHub Exploit DB Packet Storm
316617 - php_fusion php_fusion Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) art… NVD-CWE-Other
CVE-2005-2074 2024-02-14 10:17 2005-06-29 Show GitHub Exploit DB Packet Storm
316618 - php_fusion php_fusion PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information… NVD-CWE-Other
CVE-2005-2075 2024-02-14 10:17 2005-06-29 Show GitHub Exploit DB Packet Storm
316619 - e107 e107 The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_h… NVD-CWE-Other
CVE-2005-1949 2024-02-14 10:17 2005-06-16 Show GitHub Exploit DB Packet Storm
316620 - vincent_hor calendarix_advanced Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to (1) cal_week.php, (2) cal_cat.php, or (3) cal_d… NVD-CWE-Other
CVE-2005-1865 2024-02-14 10:17 2005-06-9 Show GitHub Exploit DB Packet Storm