Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5541 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-31764 2026-05-11 11:11 2026-05-1 Show GitHub Exploit DB Packet Storm
5542 6.1 警告
Network
マイクロソフト Azure Machine Learning Azure Machine Learning Notebook Spoofing Vulnerability CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-32207 2026-05-11 11:11 2026-05-7 Show GitHub Exploit DB Packet Storm
5543 3.3
Local
- デルのemc powerscale onefs における不十分なロギングに関する脆弱性 CWE-778
不十分なロギング
CVE-2026-32803 2026-05-11 11:11 2026-05-8 Show GitHub Exploit DB Packet Storm
5544 7.5 重要
Network
coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-32934 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
5545 7.5 重要
Network
coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-32936 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
5546 9.9 緊急
Network
マイクロソフト Azure Managed Instance for Apache Cassandra Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability CWE-284
不適切なアクセス制御
CVE-2026-33109 2026-05-11 11:11 2026-05-7 Show GitHub Exploit DB Packet Storm
5547 7.5 重要
Network
coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題
CVE-2026-33190 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
5548 8.8 重要
Network
FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-33324 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
5549 5.3 警告
Network
Daniel Garcia Vaultwarden Daniel GarciaのVaultwardenにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-33420 2026-05-11 11:11 2026-05-5 Show GitHub Exploit DB Packet Storm
5550 7.5 重要
Network
coredns.io CoreDNS The CoreDNS AuthorsのCoreDNSにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-33489 2026-05-11 11:10 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355421 - avaya modular_messaging_message_storage_server POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets. NVD-CWE-Other
CVE-2005-4471 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355422 - macromedia jrun Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly … NVD-CWE-Other
CVE-2005-4472 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355423 - macromedia jrun Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL." NVD-CWE-Other
CVE-2005-4473 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355424 - phpslash phpslash SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter. NVD-CWE-Other
CVE-2005-4479 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355425 - iatek intranetapp Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to login.asp or the (2)… NVD-CWE-Other
CVE-2005-4484 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355426 - ramsite r1_cms Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter. NVD-CWE-Other
CVE-2005-4487 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355427 - computeroil redakto_cms Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) iid, (2) iid2, (3) r, (4) ca… NVD-CWE-Other
CVE-2005-4488 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355428 - scoop scoop Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) type and (2) count parameters, and (3) the query strin… NVD-CWE-Other
CVE-2005-4489 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355429 - commercial_interactive_media scoop Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSea… NVD-CWE-Other
CVE-2005-4490 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm
355430 - starphire_technologies sitesage
sitesage-ee
sitesage-le
sitesage-sb
sitesage-se
Cross-site scripting (XSS) vulnerability in Starphire SiteSage 5.0.18 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the norela… NVD-CWE-Other
CVE-2005-4492 2011-03-8 11:28 2005-12-22 Show GitHub Exploit DB Packet Storm