Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3921 9.8 緊急
Network 		TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-31178 2026-04-30 12:10 2026-04-23 Show GitHub Exploit DB Packet Storm
3922 6.5 警告
Network 		TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-31179 2026-04-30 12:10 2026-04-23 Show GitHub Exploit DB Packet Storm
3923 9.8 緊急
Network 		TOTOLINK a3300r ファームウェア TOTOLINKのa3300r ファームウェアにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-31181 2026-04-30 12:10 2026-04-23 Show GitHub Exploit DB Packet Storm
3924 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2026-31472 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3925 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-31473 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3926 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-31474 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3927 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2026-31475 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3928 8.2 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31476 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3929 7.5 重要
Network 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-31477 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
3930 9.8 緊急
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-31478 2026-04-30 12:10 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348601 - cosmoshop cosmoshop Directory traversal vulnerability in bestmail_edit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter. NVD-CWE-Other
CVE-2005-2786 2016-10-18 12:30 2005-09-3 Show GitHub Exploit DB Packet Storm
348602 - urban urban Multiple stack-based buffer overflows in urban before 1.5.3 allow local users to gain privileges via a long HOME environment variable to (1) config.cc, (2) game.cc, (3) highscor.cc, or (4) meny.cc. NVD-CWE-Other
CVE-2005-2810 2016-10-18 12:30 2005-09-8 Show GitHub Exploit DB Packet Storm
348603 - - - Cross-site scripting (XSS) vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, which is recorded in a log file but not properly handled when… NVD-CWE-Other
CVE-2005-2816 2016-10-18 12:30 2005-09-8 Show GitHub Exploit DB Packet Storm
348604 - barracuda_networks barracuda_spam_firewall img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter. NVD-CWE-Other
CVE-2005-2847 2016-10-18 12:30 2005-09-8 Show GitHub Exploit DB Packet Storm
348605 - barracuda_networks barracuda_spam_firewall Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig (dig_device.cgi), (… NVD-CWE-Other
CVE-2005-2849 2016-10-18 12:30 2005-09-8 Show GitHub Exploit DB Packet Storm
348606 - nikto nikto Cross-site scripting (XSS) vulnerability in Nikto 1.35 and earlier allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly in… NVD-CWE-Other
CVE-2005-2860 2016-10-18 12:30 2005-09-8 Show GitHub Exploit DB Packet Storm
348607 - road_runner adsl_road_runner_modem ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access. NVD-CWE-Other
CVE-2005-2862 2016-10-18 12:30 2005-09-9 Show GitHub Exploit DB Packet Storm
348608 - open_webmail open_webmail Cross-site scripting (XSS) vulnerability in openwebmail-main.pl in OpenWebMail 2.41 allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter. NVD-CWE-Other
CVE-2005-2863 2016-10-18 12:30 2005-09-9 Show GitHub Exploit DB Packet Storm
348609 - - - URBAN 1.5.3_1 allows local users to overwrite arbitrary files via a symlink attack on the (1) high score or (2) save game files. NVD-CWE-Other
CVE-2005-2864 2016-10-18 12:30 2005-09-9 Show GitHub Exploit DB Packet Storm
348610 - ecw-shop ecw-shop ECW-Shop 6.0.2 allows remote attackers to reduce the total cost of their shopping cart by specifying a negative quantity for an item, which causes the price of the item to be subtracted from the tota… NVD-CWE-Other
CVE-2005-2623 2016-10-18 12:29 2005-08-19 Show GitHub Exploit DB Packet Storm