Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2671	5.9	警告 Network	マイクロソフト	Microsoft .NET Framework	.NET Framework のサービス拒否の脆弱性	CWE-362 競合状態	CVE-2026-32226	2026-05-8 12:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

2672	8.8	重要 Network	Kubernetes	ingress-nginx	Kubernetesのingress-nginxにおける入力確認に関する脆弱性	CWE-20 CWE-noinfo	CVE-2026-3288	2026-05-8 12:23	2026-03-9	Show	GitHub Exploit DB Packet Storm

2673	7.5	重要 Network	マイクロソフト	Microsoft .NET Framework .NET	.NET、.NET Framework、Visual Studio のサービス拒否の脆弱性	CWE-20 CWE-400 CWE-835	CVE-2026-33116	2026-05-8 12:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

2674	8.8	重要 Network	マイクロソフト	SQL Server 2016 SQL Server 2017 SQL Server 2022 SQL Server 2019 SQL Server 2025	Microsoft SQL Server のリモートコードが実行される脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-33120	2026-05-8 12:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

2675	5.9	警告 Network	Apache Software Foundation	Apache Log4j	Apache Software FoundationのApache Log4jにおける複数の脆弱性	CWE-295 CWE-297	CVE-2026-34477	2026-05-8 12:23	2026-04-10	Show	GitHub Exploit DB Packet Storm

2676	7.5	重要 Network	Apache Software Foundation	Apache Log4j	Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性	CWE-116 不適切なエンコード、または出力のエスケープ	CVE-2026-34479	2026-05-8 12:23	2026-04-10	Show	GitHub Exploit DB Packet Storm

2677	7.4	重要 Network	GNU Project レッドハット	Red Hat Hardened Images Red Hat Enterprise Linux Red Hat OpenShift Container Platform GnuTLS	GNU Project等の複数ベンダの製品における大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-3833	2026-05-8 12:23	2026-04-30	Show	GitHub Exploit DB Packet Storm

2678	9.1	緊急 Network	Apache Software Foundation	Apache Wicket	Apache Software FoundationのApache Wicketにおけるセッションの固定化の脆弱性	CWE-384 CWE-384	CVE-2026-40010	2026-05-8 12:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

2679	9.1	緊急 Network	Apache Software Foundation	Apache OpenNLP	Apache Software FoundationのApache OpenNLPにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-40682	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

2680	9.8	緊急 Network	Apache Software Foundation	Apache OpenNLP	Apache Software FoundationのApache OpenNLPにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-42027	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346281	-	macromedia	flash_player	Macromedia Flash plugin (1) Flash.ocx 7.0.19.0 (Windows) and earlier and (2) libflashplayer.so before 7.0.25.0 (Unix) allows remote attackers to cause a denial of service (crash) and possibly execute…	CWE-20 Improper Input Validation	CVE-2005-3591	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

346282	-	microsoft	windows_xp	By default Microsoft Windows XP Home Edition installs with a blank password for the Administrator account, which allows remote attackers to gain control of the computer.	NVD-CWE-Other	CVE-2005-3595	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

346283	-	iisworks	aspknowledgebase	SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp.	NVD-CWE-Other	CVE-2005-3596	2017-07-11 10:33	2005-11-16	Show	GitHub Exploit DB Packet Storm

346284	-	sap	sap_web_application_server	HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.	NVD-CWE-Other	CVE-2005-3633	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346285	-	sap	sap_web_application_server	frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-…	NVD-CWE-Other	CVE-2005-3634	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346286	-	sap	sap_web_application_server	Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-s…	NVD-CWE-Other	CVE-2005-3635	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346287	-	sap	sap_web_application_server	Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.	NVD-CWE-Other	CVE-2005-3636	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346288	-	floosietek	ftgate	Multiple buffer overflows in the IMAP Groupware Mail server of Floosietek FTGate (FTGate4) 4.1 allow remote attackers to execute arbitrary code via long arguments to various IMAP commands, as demonst…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-3640	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346289	-	phpadsnew phppgads	phpadsnew phppgads	phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allows remote attackers to obtain the application installation path and other sensitive information via direct requests to (1) create.php, a…	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

346290	-	phpadsnew phppgads	phpadsnew phppgads	Upgrade to phpAdsNew version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=11386 Upgrade to phpPgAds version 2.0.7 : http://sourceforge.net/project/showfiles.php?group_id=36679 …	CWE-200 Information Exposure	CVE-2005-3645	2017-07-11 10:33	2005-11-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed