Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4521	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31752	2026-05-11 10:59	2026-05-1	Show	GitHub Exploit DB Packet Storm

4522	8.8	重要 Network	Koha	Koha	KohaにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-31844	2026-05-11 10:59	2026-03-11	Show	GitHub Exploit DB Packet Storm

4523	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32167	2026-05-11 10:59	2026-04-14	Show	GitHub Exploit DB Packet Storm

4524	7.8	重要 Local	マイクロソフト	SQL Server 2019 SQL Server 2025 SQL Server 2016 SQL Server 2022 SQL Server 2017	SQL サーバーの特権の昇格の脆弱性	CWE-89 SQLインジェクション	CVE-2026-32176	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

4525	7.5	重要 Network	マイクロソフト	.NET visual studio 2022	.NET のなりすましの脆弱性	CWE-138 特殊要素の不適切な無害化	CVE-2026-32178	2026-05-11 10:58	2026-04-14	Show	GitHub Exploit DB Packet Storm

4526	6.5	警告 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32603	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

4527	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-34000	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

4528	9.1	緊急 Network	X.Org Foundation レッドハット	X.Org X Server Red Hat Enterprise Linux	レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性	CWE-805 不適切な長さの値によるバッファへのアクセス	CVE-2026-34002	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

4529	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-34458	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

4530	8.8	重要 Local	sandboxie-plus	Sandboxie	sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-34459	2026-05-11 10:58	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349641	-	antiword	antiword	The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary (a) output and …	CWE-59 Link Following	CVE-2005-3126	2017-07-11 10:33	2005-12-31	Show	GitHub Exploit DB Packet Storm

349642	-	lucidcms	lucidcms	Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via the query string.	NVD-CWE-Other	CVE-2005-3127	2017-07-11 10:33	2005-10-5	Show	GitHub Exploit DB Packet Storm

349643	-	squirrelmail	address_add_plugin	Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arbitrary web script or HTML via the IMG tag.	NVD-CWE-Other	CVE-2005-3128	2017-07-11 10:33	2005-10-5	Show	GitHub Exploit DB Packet Storm

349644	-	s9y	serendipity	Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin…	NVD-CWE-Other	CVE-2005-3129	2017-07-11 10:33	2005-10-5	Show	GitHub Exploit DB Packet Storm

349645	-	virtools	web_player	Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a filename.	NVD-CWE-Other	CVE-2005-3136	2017-07-11 10:33	2005-10-5	Show	GitHub Exploit DB Packet Storm

349646	-	gnu	cfengine	The (1) cfmailfilter and (2) cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960.	NVD-CWE-Other	CVE-2005-3137	2017-07-11 10:33	2005-10-6	Show	GitHub Exploit DB Packet Storm

349647	-	mozilla	bugzilla	Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is access…	NVD-CWE-Other	CVE-2005-3138	2017-07-11 10:33	2005-10-6	Show	GitHub Exploit DB Packet Storm

349648	-	mozilla	bugzilla	Bugzilla 2.19.1 through 2.20rc2 and 2.21, with user matching turned on in substring mode, allows attackers to list all users whose names match an arbitrary substring, even when the usevisibilitygroup…	NVD-CWE-Other	CVE-2005-3139	2017-07-11 10:33	2005-10-6	Show	GitHub Exploit DB Packet Storm

349649	-	kaspersky_lab	kaspersky_anti-virus kaspersky_anti-virus_personal kaspersky_anti-virus_personal_pro kaspersky_personal_security_suite	Heap-based buffer overflow in Kaspersky Antivirus (KAV) 5.0 and Kaspersky Personal Security Suite 1.1 allows remote attackers to execute arbitrary code via a CAB file with large records after the hea…	NVD-CWE-Other	CVE-2005-3142	2017-07-11 10:33	2005-10-6	Show	GitHub Exploit DB Packet Storm

349650	-	devellion	cubecart	Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) th…	NVD-CWE-Other	CVE-2005-3152	2017-07-11 10:33	2005-10-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed