Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3711	7.2	重要 Local	click project	click	Pallets projectのClickにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-7246	2026-05-1 10:49	2026-04-30	Show	GitHub Exploit DB Packet Storm

3712	7.8	重要 Local	LizardSystems	Terminal Services Manager	LizardSystemsのTerminal Services Managerにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25259	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

3713	5.5	警告 Local	EZB Systems	UltraISO	EZB SystemsのUltraISOにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2018-25267	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

3714	6.1	警告 Network	IceWarp, Inc.	icewarp	IceWarp, Inc.のicewarpにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2018-25269	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

3715	8.1	重要 Network	レッドハット	openshift ai	レッドハットのopenshift aiにおける隔離または分類に関する脆弱性	CWE-653 不適切な隔離または分類	CVE-2025-12805	2026-05-1 10:49	2026-03-26	Show	GitHub Exploit DB Packet Storm

3716	7.1	重要 Local	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける複数の脆弱性	CWE-121 CWE-787 CWE-787	CVE-2026-0819	2026-05-1 10:49	2026-03-19	Show	GitHub Exploit DB Packet Storm

3717	6.3	警告 Network	libssh レッドハット	Red Hat OpenShift Container Platform Red Hat Enterprise Linux libssh Red Hat Hardened Images	libssh等の複数ベンダの製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-0964	2026-05-1 10:49	2026-03-26	Show	GitHub Exploit DB Packet Storm

3718	8.2	重要 Network	libssh レッドハット	Red Hat OpenShift Container Platform Red Hat Enterprise Linux libssh Red Hat Hardened Images	libssh等の複数ベンダの製品におけるバッファアンダーフローの脆弱性	CWE-124 バッファアンダーフロー	CVE-2026-0966	2026-05-1 10:49	2026-03-26	Show	GitHub Exploit DB Packet Storm

3719	5.3	警告 Network	wolfSSL Inc.	wolfSSL	wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-1005	2026-05-1 10:49	2026-03-19	Show	GitHub Exploit DB Packet Storm

3720	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC)	Microsoft Word のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23657	2026-05-1 10:49	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347371	-	-	-	Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the keyboard and mouse.	NVD-CWE-Other	CVE-2005-0821	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347372	-	thepoolclub	ipool isnooker	ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2005-0823	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347373	-	ollydbg	ollydbg	OllyDbg 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a dynamic link library (DLL) with a long filename.	NVD-CWE-Other	CVE-2005-0826	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347374	-	icecast	icecast	IceCast 2.20 allows remote attackers to bypass the XSL parser and obtain the source for XSL files via a request for a .xsl file with a trailing . (dot).	NVD-CWE-Other	CVE-2005-0837	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347375	-	icecast	icecast	Multiple buffer overflows in the XSL parser for IceCast 2.20 may allow attackers to cause a denial of service and possibly execute arbitrary code via (1) a long test value in an xsl:when tag, (2) a l…	NVD-CWE-Other	CVE-2005-0838	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347376	-	phpmyfamily	phpmyfamily	SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passthru.php and possibly other php files in phpMyFamily 1.4.0 allows remote attacker…	NVD-CWE-Other	CVE-2005-0841	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347377	-	nortel	contivity	Nortel VPN client 5.01 stores the cleartext password in the memory of the Extranet.exe process, which could allow local users to obtain sensitive information.	CWE-310 Cryptographic Issues	CVE-2005-0844	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347378	-	funlabs	4x4_off-road_adventure_iii cabelas_big_game_hunter_2004_season cabelas_big_game_hunter_2005 cabelas_dangerous_hunts cabelas_deer_hunt_2005_season revolution secret_service_in_harms_…	Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, and US Most Wanted, allow remote att…	NVD-CWE-Other	CVE-2005-0848	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347379	-	betaparticle	betaparticle_blog	betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload files via a direct request to upload.asp or (2) delete files via a direct reque…	NVD-CWE-Other	CVE-2005-0854	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

347380	-	coolforum	coolforum	Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the img parameter.	NVD-CWE-Other	CVE-2005-0857	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed