Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3351 5.4 警告
Network
TensorOpera FEDML TensorOperaのFEDMLにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-5535 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3352 7.3 重要
Network
TensorOpera FEDML TensorOperaのFEDMLにおける複数の脆弱性 CWE-20
CWE-502
CVE-2026-5536 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3353 9.8 緊急
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-266
CWE-284
CVE-2026-5569 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3354 9.8 緊急
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-5570 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3355 7.5 重要
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-200
CWE-284
CVE-2026-5571 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3356 4.3 警告
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-352
CWE-862
CVE-2026-5572 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3357 9.8 緊急
Network
Technostrobe HI-LED-WR120-G2 Firmware TechnostrobeのHI-LED-WR120-G2 Firmwareにおける複数の脆弱性 CWE-284
CWE-434
CVE-2026-5573 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3358 8.6 重要
Network
Song Li (Song-Li) Cross browser fingerprinting Song Li (Song-Li)のCross browser fingerprintingにおける複数の脆弱性 CWE-74
CWE-89
CWE-89
CVE-2026-5577 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3359 9.8 緊急
Network
Martin (Fosowl) AgenticSeek Martin (Fosowl)のAgenticSeekにおける複数の脆弱性 CWE-74
CWE-94
CVE-2026-5584 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
3360 7.5 重要
Network
Tencent AI-Infra-Guard TencentのAI-Infra-Guardにおける複数の脆弱性 CWE-200
CWE-284
CWE-noinfo
CVE-2026-5585 2026-05-7 12:27 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346651 - saralblog saralblog SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php. CWE-89
SQL Injection
CVE-2005-4058 2017-07-20 10:29 2005-12-7 Show GitHub Exploit DB Packet Storm
346652 - rainworx rwauction_pro Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject arbitrary web script or HTML via the searchtxt parameter. CWE-79
Cross-site Scripting
CVE-2005-4060 2017-07-20 10:29 2005-12-7 Show GitHub Exploit DB Packet Storm
346653 - christian_ghisler total_commander Total Commander 6.53 uses weak encryption to store FTP usernames and passwords in WCX_FTP.INI, which allows local users to decrypt the passwords and gain access to FTP servers, as possibly demonstrat… CWE-310
Cryptographic Issues
CVE-2005-4066 2017-07-20 10:29 2005-12-7 Show GitHub Exploit DB Packet Storm
346654 - cfmagic magic_forum_personal Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ForumID parameter in view_forum.cfm, and (2… CWE-89
SQL Injection
CVE-2005-4071 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346655 - mycfnuke cf_nuke Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. (dot dot) in the (… NVD-CWE-Other
CVE-2005-4074 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346656 - mycfnuke cf_nuke Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topic and (2) newsid parameter in… NVD-CWE-Other
CVE-2005-4075 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346657 - ideal_science ideal_bb.net Multiple cross-site scripting (XSS) vulnerabilities in Ideal BB.NET 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) forumID, (2) boardID, and (3) topicRepeat… NVD-CWE-Other
CVE-2005-4078 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346658 - sugarcrm sugar_suite PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP… NVD-CWE-Other
CVE-2005-4087 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346659 - docebolms docebolms connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains … NVD-CWE-Other
CVE-2005-4094 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm
346660 - docebolms docebolms Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to list arbitrary files and directories via ".." sequences in the Type paramet… NVD-CWE-Other
CVE-2005-4095 2017-07-20 10:29 2005-12-8 Show GitHub Exploit DB Packet Storm