Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5051	8.8	重要 Network	Kubernetes	ingress-nginx	Kubernetesのingress-nginxにおける入力確認に関する脆弱性	CWE-20 CWE-noinfo	CVE-2026-3288	2026-05-8 12:23	2026-03-9	Show	GitHub Exploit DB Packet Storm

5052	7.5	重要 Network	マイクロソフト	Microsoft .NET Framework .NET	.NET、.NET Framework、Visual Studio のサービス拒否の脆弱性	CWE-20 CWE-400 CWE-835	CVE-2026-33116	2026-05-8 12:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

5053	8.8	重要 Network	マイクロソフト	SQL Server 2016 SQL Server 2017 SQL Server 2022 SQL Server 2019 SQL Server 2025	Microsoft SQL Server のリモートコードが実行される脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-33120	2026-05-8 12:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

5054	5.9	警告 Network	Apache Software Foundation	Apache Log4j	Apache Software FoundationのApache Log4jにおける複数の脆弱性	CWE-295 CWE-297	CVE-2026-34477	2026-05-8 12:23	2026-04-10	Show	GitHub Exploit DB Packet Storm

5055	7.5	重要 Network	Apache Software Foundation	Apache Log4j	Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性	CWE-116 不適切なエンコード、または出力のエスケープ	CVE-2026-34479	2026-05-8 12:23	2026-04-10	Show	GitHub Exploit DB Packet Storm

5056	7.4	重要 Network	GNU Project レッドハット	Red Hat Hardened Images Red Hat Enterprise Linux Red Hat OpenShift Container Platform GnuTLS	GNU Project等の複数ベンダの製品における大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-3833	2026-05-8 12:23	2026-04-30	Show	GitHub Exploit DB Packet Storm

5057	9.1	緊急 Network	Apache Software Foundation	Apache Wicket	Apache Software FoundationのApache Wicketにおけるセッションの固定化の脆弱性	CWE-384 CWE-384	CVE-2026-40010	2026-05-8 12:23	2026-05-6	Show	GitHub Exploit DB Packet Storm

5058	9.1	緊急 Network	Apache Software Foundation	Apache OpenNLP	Apache Software FoundationのApache OpenNLPにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-40682	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5059	9.8	緊急 Network	Apache Software Foundation	Apache OpenNLP	Apache Software FoundationのApache OpenNLPにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-42027	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5060	6.5	警告 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける複数の脆弱性	CWE-200 CWE-863	CVE-2026-42220	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
353901	-	raidenhttpd	raidenhttpd	Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.	NVD-CWE-Other	CVE-2005-0623	2016-10-18 12:13	2005-03-1	Show	GitHub Exploit DB Packet Storm

353902	-	demof	forumwa	Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) sub…	NVD-CWE-Other	CVE-2005-0628	2016-10-18 12:13	2005-03-1	Show	GitHub Exploit DB Packet Storm

353903	-	phpnews	phpnews	PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.	NVD-CWE-Other	CVE-2005-0632	2016-10-18 12:13	2005-03-1	Show	GitHub Exploit DB Packet Storm

353904	-	cerulean_studios	trillian trillian_pro	Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.	NVD-CWE-Other	CVE-2005-0633	2016-10-18 12:13	2005-03-2	Show	GitHub Exploit DB Packet Storm

353905	-	-	-	Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR head…	NVD-CWE-Other	CVE-2005-0645	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

353906	-	php_arena	panews	SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.	NVD-CWE-Other	CVE-2005-0646	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

353907	-	php_arena	panews	admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.	NVD-CWE-Other	CVE-2005-0647	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

353908	-	arif_supriyanto	auracms	auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP e…	NVD-CWE-Other	CVE-2005-0655	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

353909	-	arif_supriyanto	auracms	Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.p…	NVD-CWE-Other	CVE-2005-0656	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

353910	-	cmw_linklist	cmw_linklist	SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.	NVD-CWE-Other	CVE-2005-0658	2016-10-18 12:13	2005-05-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed