Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3221 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34682 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
3222 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34683 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
3223 7.8 重要
Local 		アドビシステムズ Adobe Substance 3D Designer アドビのAdobe Substance 3D Designerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34684 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
3224 8.7 重要
Network 		アドビシステムズ Adobe Commerce
Adobe Commerce B2B
magento 		アドビのAdobe Commerce等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-34686 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
3225 7.8 重要
Local 		アドビシステムズ Adobe After Effects アドビのAdobe After Effectsにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34690 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
3226 4.4 警告
Local 		PNG Development Group
Debian		 Debian GNU/Linux
libpng 		Debian等の複数ベンダの製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-34757 2026-05-15 11:02 2026-04-9 Show GitHub Exploit DB Packet Storm
3227 7.7 重要
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34961 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
3228 5.5 警告
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-34962 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
3229 7.8 重要
Local 		Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-34963 2026-05-15 11:02 2026-05-11 Show GitHub Exploit DB Packet Storm
3230 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-35439 2026-05-15 11:02 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312371 7.8 HIGH
Local 		sudo_project
debian
redhat 		sudo
shadow
debian_linux
enterprise_linux 		There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to … CWE-20
 Improper Input Validation  		CVE-2005-4890 2024-11-21 09:05 2019-11-5 Show GitHub Exploit DB Packet Storm
312372 5.9 MEDIUM
Network 		google chrome SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists … CWE-326
Inadequate Encryption Strength 		CVE-2005-4900 2024-11-21 09:05 2016-10-15 Show GitHub Exploit DB Packet Storm
312373 - csilvers gperftools Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large siz… CWE-189
Numeric Errors 		CVE-2005-4895 2024-11-21 09:05 2012-07-26 Show GitHub Exploit DB Packet Storm
312374 9.8 CRITICAL
Network 		gnu glibc The getgrouplist function in the GNU C library (glibc) before version 2.3.5, when invoked with a zero argument, writes to the passed pointer even if the specified array size is zero, leading to a buf… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2005-3590 2024-11-21 09:02 2019-04-11 Show GitHub Exploit DB Packet Storm
312375 9.8 CRITICAL
Network 		twiki twiki TWiki allows arbitrary shell command execution via the Include function CWE-74
Injection 		CVE-2005-3056 2024-11-21 09:01 2019-11-1 Show GitHub Exploit DB Packet Storm
312376 9.8 CRITICAL
Network 		nvu nvu Nvu 0.99+1.0pre uses an old copy of Mozilla XPCOM which can result in multiple security issues. NVD-CWE-noinfo
CVE-2005-2354 2024-11-21 08:59 2019-11-6 Show GitHub Exploit DB Packet Storm
312377 8.1 HIGH
Network 		gs-gpl_project gs-gpl I race condition in Temp files was found in gs-gpl before 8.56 addons scripts. CWE-362
Race Condition 		CVE-2005-2352 2024-11-21 08:59 2019-11-2 Show GitHub Exploit DB Packet Storm
312378 5.5 MEDIUM
Local 		mutt
debian 		mutt
debian_linux 		Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2005-2351 2024-11-21 08:59 2019-11-2 Show GitHub Exploit DB Packet Storm
312379 6.1 MEDIUM
Network 		websieve_project websieve Cross-site scripting (XSS) vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface. CWE-79
Cross-site Scripting 		CVE-2005-2350 2024-11-21 08:59 2019-11-2 Show GitHub Exploit DB Packet Storm
312380 7.5 HIGH
Network 		zoo_project zoo Zoo 2.10 has Directory traversal CWE-22
Path Traversal 		CVE-2005-2349 2024-11-21 08:59 2019-10-28 Show GitHub Exploit DB Packet Storm