Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4591 6.5 警告
Network
8421bit MiniClaw 8421bitのMiniClawにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-8113 2026-05-18 12:05 2026-05-7 Show GitHub Exploit DB Packet Storm
4592 8.8 重要
Network
sentry sentry sentryにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2021-47935 2026-05-18 12:05 2026-05-10 Show GitHub Exploit DB Packet Storm
4593 7.8 重要
Local
ashlar lithium
Cobalt Share
cobalt
argon
xenon
Ashlar-VellumのArgon等の複数製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-65086 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
4594 7.8 重要
Local
ashlar lithium
Cobalt Share
cobalt
argon
xenon
Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2025-65087 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
4595 7.8 重要
Local
ashlar lithium
Cobalt Share
cobalt
argon
xenon
Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2025-65088 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
4596 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2025-71296 2026-05-18 12:04 2026-05-8 Show GitHub Exploit DB Packet Storm
4597 7.4 重要
Adjacent
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-40413 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4598 7.4 重要
Adjacent
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のサービス拒否の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-40414 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4599 8.1 重要
Network
マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft …
Windows TCP/IP のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-40415 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
4600 4.3 警告
Network
マイクロソフト Microsoft Word
Microsoft 365 Apps
Microsoft Office
Microsoft Word の情報漏えいの脆弱性 CWE-73
ファイル名やパス名の外部制御
CVE-2026-40421 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350861 - bitrix bitrix_site_manager PHP remote file inclusion vulnerability in start.php in Bitrix Site Manager 4.0.x allows remote attackers to execute arbitrary PHP code via the _SERVER[DOCUMENT_ROOT] parameter. CWE-94
Code Injection
CVE-2005-1996 2017-07-11 10:32 2005-06-15 Show GitHub Exploit DB Packet Storm
350862 - hauri virobot_linux_server Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE). NVD-CWE-Other
CVE-2005-2041 2017-07-11 10:32 2005-06-15 Show GitHub Exploit DB Packet Storm
350863 - tor tor Unknown vulnerability in Tor before 0.1.0.10 allows remote attackers to read arbitrary memory and possibly key information from the exit server's process space. NVD-CWE-Other
CVE-2005-2050 2017-07-11 10:32 2005-06-28 Show GitHub Exploit DB Packet Storm
350864 - digium asterisk Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that … NVD-CWE-Other
CVE-2005-2081 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350865 - truenorth_software ia_emailserver Format string vulnerability in IMAP4 in IA eMailServer Corporate Edition 5.2.2 build 1051 allows remote attackers to cause a denial of service (application crash) via a LIST command with format strin… NVD-CWE-Other
CVE-2005-2083 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350866 - ibm websphere_application_server IBM WebSphere 5.1 and WebSphere 5.0 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Enco… NVD-CWE-Other
CVE-2005-2091 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350867 - bea weblogic_server BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: c… NVD-CWE-Other
CVE-2005-2092 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350868 - oracle application_server Oracle 9i Application Server (Oracle9iAS) 9.0.2 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "T… NVD-CWE-Other
CVE-2005-2093 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350869 - sun one_web_server Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: … NVD-CWE-Other
CVE-2005-2094 2017-07-11 10:32 2005-07-5 Show GitHub Exploit DB Packet Storm
350870 - the_cacti_group cacti Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remote attackers to execute arbitrary commands or SQL by sending a legitimate value i… NVD-CWE-Other
CVE-2005-2148 2017-07-11 10:32 2005-07-6 Show GitHub Exploit DB Packet Storm