Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2921	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office のリモートコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32190	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

2922	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-33095	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

2923	9.3	緊急 Network	マイクロソフト	Microsoft 365 Copilot	Microsoft 365 Copilot の特権昇格の脆弱性	CWE-601 オープンリダイレクト	CVE-2026-33102	2026-05-1 10:48	2026-04-23	Show	GitHub Exploit DB Packet Storm

2924	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-33114	2026-05-1 10:48	2026-04-14	Show	GitHub Exploit DB Packet Storm

2925	8.4	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-33115	2026-05-1 10:47	2026-04-14	Show	GitHub Exploit DB Packet Storm

2926	7.8	重要 Local	ggml.ai	llama.cpp	ggml.aiのllama.cppにおける複数の脆弱性	CWE-122 CWE-190	CVE-2026-33298	2026-05-1 10:47	2026-03-24	Show	GitHub Exploit DB Packet Storm

2927	6.1	警告 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word の情報漏えいの脆弱性	CWE-125 境界外読み取り	CVE-2026-33822	2026-05-1 10:47	2026-04-14	Show	GitHub Exploit DB Packet Storm

2928	5.2	警告 Physics	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおけるPRNG におけるシードの不正な使用に関する脆弱性	CWE-335 PRNGにおけるシードの不正な使用	CVE-2026-3503	2026-05-1 10:47	2026-03-19	Show	GitHub Exploit DB Packet Storm

2929	9.8	緊急 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける複数の脆弱性	CWE-122 CWE-787 CWE-787	CVE-2026-3548	2026-05-1 10:47	2026-03-19	Show	GitHub Exploit DB Packet Storm

2930	5.9	警告 Network	VMware	Spring AI	VMwareのSpring AIにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40966	2026-05-1 10:47	2026-04-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347091	-	hitachi	ip5000_voip_wifi_phone	Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access t…	NVD-CWE-Other	CVE-2005-3723	2016-10-18 12:37	2005-11-21	Show	GitHub Exploit DB Packet Storm

347092	-	zyxel	prestige_2000w_v.1voip_wi-fi_phone	Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or…	NVD-CWE-Other	CVE-2005-3725	2016-10-18 12:37	2005-11-21	Show	GitHub Exploit DB Packet Storm

347093	-	pollvote	pollvote	PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter.	CWE-94 Code Injection	CVE-2005-3775	2016-10-18 12:37	2005-11-23	Show	GitHub Exploit DB Packet Storm

347094	-	mybulletinboard	mybulletinboard	Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allow remote attackers to inject arbitrary web script or HTML via (1) the subject field when creating a n…	NVD-CWE-Other	CVE-2005-3776	2016-10-18 12:37	2005-11-23	Show	GitHub Exploit DB Packet Storm

347095	-	mybulletinboard	mybulletinboard	MyBulletinBoard (MyBB) 1.0 PR2 Rev 686 allows remote attackers to delete or move private messages (PM) via modified fields in the inbox form.	NVD-CWE-Other	CVE-2005-3777	2016-10-18 12:37	2005-11-23	Show	GitHub Exploit DB Packet Storm

347096	-	phpwcms	phpwcms	Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) form_lang parameter in login.php and (2) the imgdir paramete…	NVD-CWE-Other	CVE-2005-3789	2016-10-18 12:37	2005-11-24	Show	GitHub Exploit DB Packet Storm

347097	-	-	-	Multiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) i and (2) text parameters.	NVD-CWE-Other	CVE-2005-3790	2016-10-18 12:37	2005-11-24	Show	GitHub Exploit DB Packet Storm

347098	-	phpadsnew phppgads	phpadsnew phppgads	HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors.	NVD-CWE-Other	CVE-2005-3791	2016-10-18 12:37	2005-11-24	Show	GitHub Exploit DB Packet Storm

347099	-	phpbb_group	phpbb	phpBB 2.0.18 allows remote attackers to obtain sensitive information via a large SQL query, which generates an error message that reveals SQL syntax or the full installation path.	NVD-CWE-Other	CVE-2005-3799	2016-10-18 12:37	2005-11-24	Show	GitHub Exploit DB Packet Storm

347100	-	counterpane	passwordsafe	CounterPane PasswordSafe 1.x and 2.x allows local users to test possible encryption keys against a subset of the stored key data without performing the more expensive key derivation function (KDF) fu…	NVD-CWE-Other	CVE-2005-3801	2016-10-18 12:37	2005-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed