Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1211 8.8 重要
Network 		Shopify Tophat ShopifyのTophatにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-39862 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
1212 8.5 重要
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39974 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
1213 6.5 警告
Network 		Hydro System. PHU. Szafraniec M. Control System Hydro System. PHU. Szafraniec M.のControl Systemにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-4901 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
1214 4 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 CWE-562
CWE-665
CVE-2026-34553 2026-04-21 10:42 2026-03-31 Show GitHub Exploit DB Packet Storm
1215 8.2 重要
Network 		qdPM qdPM qdPMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2018-25208 2026-04-21 10:41 2026-03-26 Show GitHub Exploit DB Packet Storm
1216 5.5 警告
Local 		SolarWinds FTP Voyager SolarWindsのFTP Voyagerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25252 2026-04-21 10:41 2026-04-4 Show GitHub Exploit DB Packet Storm
1217 7.1 重要
Network 		SalesAgility SuiteCRM SalesAgilityのSuiteCRMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2019-25663 2026-04-21 10:40 2026-04-5 Show GitHub Exploit DB Packet Storm
1218 7.1 重要
Network 		SalesAgility SuiteCRM SalesAgilityのSuiteCRMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2019-25664 2026-04-21 10:40 2026-04-5 Show GitHub Exploit DB Packet Storm
1219 5.5 警告
Local 		Nsasoft US LLC. SpotAuditor Nsasoft US LLC.のSpotAuditorにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2019-25666 2026-04-21 10:40 2026-04-5 Show GitHub Exploit DB Packet Storm
1220 7.5 重要
Network 		Georgia Tech Computing For Good's Basic Laboratory Information System Georgia TechのComputing For Good's Basic Laboratory Information Systemにおける複数の脆弱性 CWE-306
CWE-89
CVE-2019-25678 2026-04-21 10:40 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348721 - be beos Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. NVD-CWE-Other
CVE-2000-1152 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348722 - network_associates sniffer_agent Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. NVD-CWE-Other
CVE-2000-1157 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348723 - network_associates sniffer_agent NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords. NVD-CWE-Other
CVE-2000-1158 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348724 - network_associates sniffer_agent NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. NVD-CWE-Other
CVE-2000-1159 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348725 - network_associates sniffer_agent NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests. NVD-CWE-Other
CVE-2000-1160 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348726 - adcycle adcycle The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete data… NVD-CWE-Other
CVE-2000-1161 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348727 - rob_flynn gaim Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag. NVD-CWE-Other
CVE-2000-1172 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348728 - microsys cyberpatrol Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sn… NVD-CWE-Other
CVE-2000-1173 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348729 - jan_hubicka koules Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument. NVD-CWE-Other
CVE-2000-1175 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348730 - yabb yabb Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field. NVD-CWE-Other
CVE-2000-1176 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm