Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3191 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41138 2026-04-27 10:47 2026-04-23 Show GitHub Exploit DB Packet Storm
3192 7 重要
Network 		openremote openremote openremoteにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41166 2026-04-27 10:47 2026-04-22 Show GitHub Exploit DB Packet Storm
3193 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおける過度な反復の脆弱性 CWE-834
過度なイテレーション 		CVE-2026-41168 2026-04-27 10:46 2026-04-22 Show GitHub Exploit DB Packet Storm
3194 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト 		CVE-2026-41264 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3195 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-41265 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3196 7.5 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-200
CWE-522
CWE-862
CVE-2026-41266 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3197 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-639
CWE-915
CVE-2026-41267 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3198 9.8 緊急
Network 		flowiseai flowise flowiseaiのflowiseにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41268 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3199 8.8 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-41269 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
3200 8.3 重要
Network 		flowiseai flowise flowiseaiのflowiseにおける複数の脆弱性 CWE-284
CWE-918
CVE-2026-41270 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348611 - cisco aironet_ap1131
aironet_ap1200
aironet_ap1240 		Cisco 1200, 1131, and 1240 series Access Points, when operating in Lightweight Access Point Protocol (LWAPP) mode and controlled by 2000 and 4400 series Airespace WLAN controllers running 3.1.59.24, … NVD-CWE-Other
CVE-2005-3482 2011-03-8 11:26 2005-11-3 Show GitHub Exploit DB Packet Storm
348612 - clam_anti-virus clamav The tnef_attachment function in tnef.c for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via a crafted value in a CA… NVD-CWE-Other
CVE-2005-3500 2011-03-8 11:26 2005-11-5 Show GitHub Exploit DB Packet Storm
348613 - ibm aix Buffer overflow in swcons in IBM AIX 5.2, when debug malloc is enabled, allows remote attackers to cause a core dump and possibly execute arbitrary code. NVD-CWE-Other
CVE-2005-3504 2011-03-8 11:26 2005-11-5 Show GitHub Exploit DB Packet Storm
348614 - cutephp cutenews Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to (1) show_arc… NVD-CWE-Other
CVE-2005-3507 2011-03-8 11:26 2005-11-6 Show GitHub Exploit DB Packet Storm
348615 - jportal jportal_web_portal Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id parameter to (2) print.php, (3) comment.php, and (4) news.php. NVD-CWE-Other
CVE-2005-3509 2011-03-8 11:26 2005-11-6 Show GitHub Exploit DB Packet Storm
348616 - miklos_szeredi fuse fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain… NVD-CWE-Other
CVE-2005-3531 2011-03-8 11:26 2005-11-23 Show GitHub Exploit DB Packet Storm
348617 - osh osh Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename. NVD-CWE-Other
CVE-2005-3533 2011-03-8 11:26 2005-12-11 Show GitHub Exploit DB Packet Storm
348618 - peel peel SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter. NVD-CWE-Other
CVE-2005-3572 2011-03-8 11:26 2005-11-16 Show GitHub Exploit DB Packet Storm
348619 - icms_content_management_systems icms PHP file inclusion vulnerability in index.php of iCMS allows remote attackers to include arbitrary files via the page parameter. NVD-CWE-Other
CVE-2005-3574 2011-03-8 11:26 2005-11-16 Show GitHub Exploit DB Packet Storm
348620 - cynox cyphor SQL injection vulnerability in show.php in Cyphor 0.19 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NVD-CWE-Other
CVE-2005-3575 2011-03-8 11:26 2005-11-16 Show GitHub Exploit DB Packet Storm