Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4121	9.9	緊急 Network	マイクロソフト	Azure Managed Instance for Apache Cassandra	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	CWE-284 不適切なアクセス制御	CVE-2026-33109	2026-05-11 11:11	2026-05-7	Show	GitHub Exploit DB Packet Storm

4122	7.5	重要 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける認証アルゴリズムの不適切な実装に関する脆弱性	CWE-303 認証アルゴリズム上の問題	CVE-2026-33190	2026-05-11 11:11	2026-05-5	Show	GitHub Exploit DB Packet Storm

4123	8.8	重要 Network	FIT2CLOUD	SQLBot	FIT2CLOUDのSQLBotにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-33324	2026-05-11 11:11	2026-05-5	Show	GitHub Exploit DB Packet Storm

4124	5.3	警告 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-33420	2026-05-11 11:11	2026-05-5	Show	GitHub Exploit DB Packet Storm

4125	7.5	重要 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-33489	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4126	6.5	警告 Network	マイクロソフト	Microsoft Teams	Microsoft Team Events Portal Information Disclosure Vulnerability	CWE-285 不適切な認可	CVE-2026-33823	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4127	9	緊急 Network	マイクロソフト	Azure Managed Instance for Apache Cassandra	Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability	CWE-20 不適切な入力確認	CVE-2026-33844	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4128	8.2	重要 Network	マイクロソフト	Microsoft Partner Center	Microsoft Partner Center Spoofing Vulnerability	CWE-610 別領域リソースに対する外部からの制御可能な参照	CVE-2026-34327	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

4129	5.3	警告 Network	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける弱いハッシュの使用に関する脆弱性	CWE-328 脆弱なハッシュの使用	CVE-2026-34527	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

4130	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35072	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349991	-	s9y	serendipity	SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.	NVD-CWE-Other	CVE-2005-1134	2017-07-11 10:32	2005-04-13	Show	GitHub Exploit DB Packet Storm

349992	-	-	-	calendar.pl in CalendarScript 3.20 allows remote attackers to obtain sensitive information via invalid (1) calendar or (2) template parameters, which leaks the full pathname and debug information.	NVD-CWE-Other	CVE-2005-1147	2017-07-11 10:32	2005-04-12	Show	GitHub Exploit DB Packet Storm

349993	-	calendarscript	calendarscript	calendar.pl in CalendarScript 3.21 allows remote attackers to obtain sensitive information via invalid (1) year or (2) month parameters, which leaks the full pathname and debug information.	NVD-CWE-Other	CVE-2005-1148	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349994	-	yager_development	yager_game	Yager 5.24 and earlier allows remote attackers to cause a denial of service (application hang) via a packet with a game header that provides less data than indicated by the length.	NVD-CWE-Other	CVE-2005-1164	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349995	-	-	-	Yager 5.24 and earlier allows remote attackers to cause a denial of service (application crash) via certain malformed data.	NVD-CWE-Other	CVE-2005-1165	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349996	-	datenbank_module	datenbank_module	Cross-site scripting (XSS) vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter.	NVD-CWE-Other	CVE-2005-1171	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349997	-	ibm	aix	Race condition in JFS2 on AIX 5.2 and 5.3, when deleting a file while I/O is still occurring for that file, may write data to a different file, which could leak sensitive information.	NVD-CWE-Other	CVE-2005-1176	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349998	-	usermin webmin	usermin webmin	Unknown vulnerability in (1) Webmin and (2) Usermin before 1.200 causes Webmin to change permissions and ownership of configuration files, with unknown impact.	NVD-CWE-Other	CVE-2005-1177	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

349999	-	oracle	forms	SQL injection vulnerability in Oracle Forms 10g allows remote attackers to execute arbitrary SQL commands via the Query/Where feature.	NVD-CWE-Other	CVE-2005-1178	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

350000	-	xerox	workcentre workcentre_165 workcentre_175 workcentre_2128 workcentre_2636 workcentre_32_color workcentre_35 workcentre_3545 workcentre_40_color workcentre_45 workcentre_5…	Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11…	NVD-CWE-Other	CVE-2005-1179	2017-07-11 10:32	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed