Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3731 9.1 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-27843 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3732 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性 CWE-789
過剰なサイズ値のメモリ割り当て 		CVE-2026-33524 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3733 7.5 重要
Network 		Navigation Data Standard (NDS) Zserio Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-33666 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3734 7.5 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-35064 2026-04-30 12:08 2026-04-24 Show GitHub Exploit DB Packet Storm
3735 7.1 重要
Local 		Gwenhael Goavec-Merou (trabucayre) openFPGALoader Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35170 2026-04-30 12:08 2026-04-6 Show GitHub Exploit DB Packet Storm
3736 7.1 重要
Local 		Gwenhael Goavec-Merou (trabucayre) openFPGALoader Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35176 2026-04-30 12:08 2026-04-6 Show GitHub Exploit DB Packet Storm
3737 6.5 警告
Network 		Coder Code Extension Marketplace CoderのCode Extension Marketplaceにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35454 2026-04-30 12:07 2026-04-6 Show GitHub Exploit DB Packet Storm
3738 9.8 緊急
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-35503 2026-04-30 12:07 2026-04-24 Show GitHub Exploit DB Packet Storm
3739 8.1 重要
Network 		SenseLive X3500 Firmware SenseLiveのX3500 Firmwareにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-39462 2026-04-30 12:07 2026-04-24 Show GitHub Exploit DB Packet Storm
3740 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-31509 2026-04-30 11:07 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349291 - - - Macromedia Breeze Communication Server and Breeze Live Server does 5.1 and earlier not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service (instability or cra… NVD-CWE-Other
CVE-2005-3900 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349292 - amazon_shop amazon_shop Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.0.2, allows remote attackers to inject web script or HTML via the query paramete… CWE-79
Cross-site Scripting 		CVE-2005-3908 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349293 - bosdev bosdates Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) category parameters. NVD-CWE-Other
CVE-2005-3911 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349294 - vchs vchs Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the f… NVD-CWE-Other
CVE-2005-3913 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349295 - affcommerce affcommerce Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemI… NVD-CWE-Other
CVE-2005-3914 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349296 - clavister clavister_firewall
clavister_security_gateway 		The Internet Key Exchange version 1 (IKEv1) implementation in Clavister Client Web allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as… NVD-CWE-Other
CVE-2005-3915 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349297 - wsn_forum wsn_forum SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action. NVD-CWE-Other
CVE-2005-3916 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349298 - commodityrentals commodityrentals SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the user_id parameter. NVD-CWE-Other
CVE-2005-3917 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349299 - netobjects netobjects_fusion NetObjects Fusion 9 (NOF9) allows remote attackers to obtain sensitive information, including passwords, by downloading the _versioning_repository_/rollbacklog.xml file, then using it to download and… NVD-CWE-Other
CVE-2005-3923 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm
349300 - helpdesk_issue_manager helpdesk_issue_manager Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) detail[], (2) orderdir, an… NVD-CWE-Other
CVE-2005-3925 2011-03-8 11:27 2005-11-30 Show GitHub Exploit DB Packet Storm