Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2721	9.8	緊急 Network	Yarbo	Lawn Mower Pro Firmware Lawn Mower Firmware	YarboのLawn Mower Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-7415	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

2722	6.5	警告 Network	8421bit	MiniClaw	8421bitのMiniClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-8113	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

2723	8.8	重要 Network	sentry	sentry	sentryにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2021-47935	2026-05-18 12:05	2026-05-10	Show	GitHub Exploit DB Packet Storm

2724	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-65086	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2725	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-65087	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2726	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-65088	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

2727	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71296	2026-05-18 12:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

2728	7.4	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft …	Windows TCP/IP のサービス拒否の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-40413	2026-05-18 11:31	2026-05-12	Show	GitHub Exploit DB Packet Storm

2729	7.4	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft …	Windows TCP/IP のサービス拒否の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-40414	2026-05-18 11:31	2026-05-12	Show	GitHub Exploit DB Packet Storm

2730	8.1	重要 Network	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft …	Windows TCP/IP のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40415	2026-05-18 11:31	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356531	-	apsis	pound	HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with c…	NVD-CWE-Other	CVE-2005-3751	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356532	-	ldapdiff	ldapdiff	Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf path construction".	NVD-CWE-Other	CVE-2005-3752	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356533	-	linux	linux_kernel	Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher p…	NVD-CWE-Other	CVE-2005-3753	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356534	-	exponent	exponent	Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form gene…	NVD-CWE-Other	CVE-2005-3761	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356535	-	exponent	exponent	Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resu…	NVD-CWE-Other	CVE-2005-3763	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356536	-	exponent	exponent	The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly invol…	NVD-CWE-Other	CVE-2005-3764	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356537	-	exponent	exponent	Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2005-3765	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356538	-	exponent	exponent	Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers t…	NVD-CWE-Other	CVE-2005-3766	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356539	-	php_download_manager	php_download_manager	SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.	NVD-CWE-Other	CVE-2005-3769	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

356540	-	-	-	Unspecified vulnerability in MyBulletinBoard (MyBB) before 1.0 PR2 Rev 686 allows attackers to cause a denial of service via unknown vectors.	NVD-CWE-Other	CVE-2005-3778	2008-09-6 05:55	2005-11-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed