Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3591	7.5	重要 Network	Amazon.com, Inc.	Bedrock Agentcore Starter Toolkit	Amazon.com, Inc.のBedrock Agentcore Starter Toolkitにおける複数の脆弱性	CWE-283 CWE-340	CVE-2026-4269	2026-05-12 10:19	2026-03-16	Show	GitHub Exploit DB Packet Storm

3592	7.5	重要 Network	VEGA	VEGAPULS 6X Firmware	VEGAのVEGAPULS 6X Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-3323	2026-05-12 10:19	2026-04-28	Show	GitHub Exploit DB Packet Storm

3593	3.3	低 Local	ちとらソフト	Lhaz+ Lhaz	LhazおよびLhaz+におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41530	2026-05-11 17:15	2026-05-11	Show	GitHub Exploit DB Packet Storm

3594	-	-	Apache Software Foundation	Apache HTTP Server	Apache HTTP Server 2.4における複数の脆弱性に対するアップデート（2026年5月）	-	CVE-2026-23918 CVE-2026-24072 CVE-2026-28780 CVE-2026-29168 CVE-2026-29169 CVE-2026-33006 CVE-2026-33007 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-34059	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

3595	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月07日）	-	-	2026-05-11 16:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

3596	7.2	重要 Network	株式会社GROWI	GROWI	GROWIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41951	2026-05-11 15:29	2026-05-11	Show	GitHub Exploit DB Packet Storm

3597	7.4	重要 Network	株式会社EPG	iOSアプリ「くら寿司公式アプリ」 Androidアプリ「くら寿司公式アプリ」	スマートフォンアプリ「くら寿司公式アプリ」における証明書検証不備の脆弱性	CWE-Other その他	CVE-2026-41872	2026-05-11 12:52	2026-05-11	Show	GitHub Exploit DB Packet Storm

3598	3.3	低 Local	X.Org Foundation	libxpm	libXpmにおける境界外読み取りの脆弱性	CWE-Other その他	CVE-2026-4367	2026-05-11 12:18	2026-05-11	Show	GitHub Exploit DB Packet Storm

3599	7.3	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2024-46507	2026-05-11 11:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

3600	7.5	重要 Network	yeti-platform	yeti	yeti-platformのyetiにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2024-46508	2026-05-11 11:12	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357161	-	mlterm	mlterm	Integer overflow in mlterm 2.5.0 through 2.9.1, with gdk-pixbuf support enabled, allows remote attackers to execute arbitrary code via a large image file that is used as a background.	NVD-CWE-Other	CVE-2005-0686	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357162	-	hashcash	hashcash	Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply addr…	NVD-CWE-Other	CVE-2005-0687	2008-09-6 05:47	2005-03-6	Show	GitHub Exploit DB Packet Storm

357163	-	jowood_productions	chaser	Buffer overflow in JoWood Chaser 1.50 and earlier allows remote attackers to cause a denial of service (client or server crash) and execute arbitrary code via a long nickname.	NVD-CWE-Other	CVE-2005-0693	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357164	-	brt	copperexport	SQL injection vulnerability in the process_picture function xp_publish.php in CopperExport 0.2.1 allows remote attackers to execute arbitrary SQL commands, possibly via the (1) title, (2) caption, or…	NVD-CWE-Other	CVE-2005-0697	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357165	-	jason_hines	phpweblog	PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) G_PATH parameter to init.inc.php or the (2) PATH para…	NVD-CWE-Other	CVE-2005-0698	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357166	-	aztek_forum	aztek_forum	The export_index action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATK_ADMIN cookie.	NVD-CWE-Other	CVE-2005-0700	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357167	-	phpmyfaq	phpmyfaq	SQL injection vulnerability in phpMyFAQ 1.4 and 1.5 allows remote attackers to add FAQ records to the database via the username field in forum messages.	NVD-CWE-Other	CVE-2005-0702	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357168	-	xerox	workcentre_165 workcentre_175 workcentre_2128 workcentre_2636 workcentre_32_color workcentre_35 workcentre_3545 workcentre_40_color workcentre_45 workcentre_55 workcentr…	Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032,…	NVD-CWE-Other	CVE-2005-0703	2008-09-6 05:47	2005-03-7	Show	GitHub Exploit DB Packet Storm

357169	-	apple	mac_os_x mac_os_x_server	The Bluetooth Setup Assistant for Mac OS X before 10.3.8 can be launched without a keyboard or Bluetooth device, which allows local users to bypass access restrictions and gain privileges.	NVD-CWE-Other	CVE-2005-0713	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

357170	-	apple	mac_os_x mac_os_x_server	AFP Server in Mac OS X before 10.3.8 uses insecure permissions for "Drop Boxes," which allows local users to read the contents of a Drop Box.	NVD-CWE-Other	CVE-2005-0715	2008-09-6 05:47	2005-03-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed