Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3881 8.8 重要
Network 		Paperclip paperclipai PaperclipのpaperclipaiにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-41208 2026-04-30 12:12 2026-04-23 Show GitHub Exploit DB Packet Storm
3882 6.5 警告
Network 		Frappe Frappe HR FrappeのFrappe HRにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-41320 2026-04-30 12:12 2026-04-21 Show GitHub Exploit DB Packet Storm
3883 7.5 重要
Network 		chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 Firmwareにおける重要な情報を含むソースコードに関する脆弱性 CWE-540
機密情報を含むソースコード 		CVE-2026-4155 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
3884 7.5 重要
Adjacent 		chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-4156 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
3885 7.5 重要
Adjacent 		chargepoint Home Flex CPH50 Firmware ChargePoint, Inc.のHome Flex CPH50 FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-4157 2026-04-30 12:12 2026-04-11 Show GitHub Exploit DB Packet Storm
3886 6.6 警告
Local 		Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41664 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3887 6.1 警告
Local 		Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41665 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3888 6.6 警告
Local 		Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41666 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3889 6.6 警告
Local 		Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41667 2026-04-30 12:12 2026-04-22 Show GitHub Exploit DB Packet Storm
3890 10 緊急
Network 		Paperclip paperclipai/server
paperclipai 		Paperclipの@paperclipai/server等の複数製品における複数の脆弱性 CWE-1188
CWE-287
CWE-862
CVE-2026-41679 2026-04-30 12:12 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348841 - jgs-xa jgs-portal Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) yea… NVD-CWE-Other
CVE-2005-1633 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348842 - jgs-xa jgs-portal Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_… NVD-CWE-Other
CVE-2005-1634 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348843 - jgs-xa jgs-portal JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_port… NVD-CWE-Other
CVE-2005-1635 2016-10-18 12:21 2005-05-17 Show GitHub Exploit DB Packet Storm
348844 - yahoo messenger The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly w… NVD-CWE-Other
CVE-2005-1671 2016-10-18 12:21 2005-05-19 Show GitHub Exploit DB Packet Storm
348845 - timo_rossi picasm Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message. NVD-CWE-Other
CVE-2005-1679 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348846 - d-link dsl-502t
dsl-504t
dsl-562t
dsl-g604t 		D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or… NVD-CWE-Other
CVE-2005-1680 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348847 - bugada_andrea php_advanced_transfer_manager PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter … NVD-CWE-Other
CVE-2005-1681 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348848 - microsoft word Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitr… NVD-CWE-Other
CVE-2005-1683 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348849 - episodex episodex_guestbook Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields. NVD-CWE-Other
CVE-2005-1684 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm
348850 - wordpress wordpress SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter. NVD-CWE-Other
CVE-2005-1687 2016-10-18 12:21 2005-05-20 Show GitHub Exploit DB Packet Storm