Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2791 8.8 重要
Network
openwebui open webui openwebuiのopen webuiにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-45672 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
2792 7.5 重要
Network
ws project ws ws projectのwsにおける初期化されていないリソースの使用に関する脆弱性 CWE-908
初期化されていないリソースの使用
CVE-2026-45736 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
2793 5.5 警告
Local
freedesktop.org GStreamer Good Plug-ins freedesktop.orgのGStreamer Good Plug-insにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2026-46469 2026-05-21 10:50 2026-05-14 Show GitHub Exploit DB Packet Storm
2794 9.1 緊急
Network
freedesktop.org GStreamer Good Plug-ins freedesktop.orgのGStreamer Good Plug-insにおけるゼロ除算に関する脆弱性 CWE-369
ゼロ除算
CVE-2026-46470 2026-05-21 10:50 2026-05-14 Show GitHub Exploit DB Packet Storm
2795 7 重要
Local
Vim Vim Vimにおける複数の脆弱性 CWE-78
CWE-88
CVE-2026-46483 2026-05-21 10:50 2026-05-15 Show GitHub Exploit DB Packet Storm
2796 7.3 重要
Network
Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける複数の脆弱性 CWE-94
CWE-95
CVE-2026-46586 2026-05-21 10:50 2026-05-19 Show GitHub Exploit DB Packet Storm
2797 5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-6333 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
2798 6.5 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て
CVE-2026-6340 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
2799 9.8 緊急
Network
LMSYS Org SGLang LMSYS OrgのSGLangにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-7301 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
2800 9.1 緊急
Network
LMSYS Org SGLang LMSYS OrgのSGLangにおけるパストラバーサルの脆弱性 CWE-35
パストラバーサル
CVE-2026-7302 2026-05-21 10:50 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345421 - kde kde kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files. NVD-CWE-Other
CVE-2005-2494 2017-10-11 10:30 2005-09-7 Show GitHub Exploit DB Packet Storm
345422 - dave_mills ntpd The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with diff… NVD-CWE-Other
CVE-2005-2496 2017-10-11 10:30 2005-09-3 Show GitHub Exploit DB Packet Storm
345423 - slocate slocate slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory str… NVD-CWE-Other
CVE-2005-2499 2017-10-11 10:30 2005-08-23 Show GitHub Exploit DB Packet Storm
345424 - cvs cvs cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack. NVD-CWE-Other
CVE-2005-2693 2017-10-11 10:30 2005-08-27 Show GitHub Exploit DB Packet Storm
345425 - mozilla firefox
mozilla_suite
Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instea… NVD-CWE-Other
CVE-2005-2701 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
345426 - mozilla firefox
mozilla_suite
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner… NVD-CWE-Other
CVE-2005-2702 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
345427 - mozilla firefox
mozilla_suite
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in … CWE-94
Code Injection
CVE-2005-2703 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
345428 - mozilla firefox
mozilla_suite
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface. NVD-CWE-Other
CVE-2005-2704 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
345429 - mozilla firefox
mozilla_suite
Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2005-2705 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
345430 - mozilla firefox
mozilla_suite
Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla. NVD-CWE-Other
CVE-2005-2706 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm