Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1431	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35072	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

1432	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35073	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

1433	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-35074	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

1434	6.7	警告 Local	デル	data domain operating system PowerProtect DP Series Appliance	デルのdata domain operating system等の複数製品における引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-35153	2026-05-11 11:10	2026-04-17	Show	GitHub Exploit DB Packet Storm

1435	8.8	重要 Network	Project Jupyter	Jupyter Server	Project JupyterのJupyter Serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35397	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

1436	9.6	緊急 Network	マイクロソフト	Azure Cloud Shell	Azure Cloud Shell Spoofing Vulnerability	CWE-77 コマンドインジェクション	CVE-2026-35428	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

1437	10	緊急 Network	マイクロソフト	Azure AI Foundry	Azure AI Foundry の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35435	2026-05-11 11:10	2026-05-7	Show	GitHub Exploit DB Packet Storm

1438	9.8	緊急 Network	coredns.io	CoreDNS	The CoreDNS AuthorsのCoreDNSにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-35579	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

1439	9.8	緊急 Network	Kestra	Kestra	KestraにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-38428	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

1440	7.2	重要 Network	Gotenberg, Inc.	Gotenberg	TheCodingMachineのGotenbergにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39383	2026-05-11 11:10	2026-05-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352421	-	netgear	rm356 rt338	Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap.	NVD-CWE-Other	CVE-2002-2116	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352422	-	qnx	rtos	Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10.	NVD-CWE-Other	CVE-2002-2120	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352423	-	pointsec_mobile_technologies	pointsec	Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.	NVD-CWE-Other	CVE-2002-2122	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352424	-	pedestal_software	integrity_protection_driver	restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.	NVD-CWE-Other	CVE-2002-2126	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352425	-	w-agora	w-agora	editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. (dot dot) sequences in the file parameter.	NVD-CWE-Other	CVE-2002-2128	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352426	-	gallery_project	gallery	publish_xp_docs.php in Gallery 1.3.2 allows remote attackers to execute arbitrary PHP code by modifying the GALLERY_BASEDIR parameter to reference a URL on a remote web server that contains the code.	NVD-CWE-Other	CVE-2002-2130	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352427	-	perl-httpd	perl-httpd	Directory traversal vulnerability in Perl-HTTPd before 1.0.2 allows remote attackers to view arbitrary files via a .. (dot dot) in an unknown argument.	NVD-CWE-Other	CVE-2002-2131	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352428	-	telindus	1120_adsl_router	Telindus 1100 ASDL router running firmware 6.0.x uses weak encryption for UDP session traffic, which allows remote attackers to gain unauthorized access by sniffing and decrypting the administrative …	NVD-CWE-Other	CVE-2002-2133	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352429	-	peel	peel	haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file.	NVD-CWE-Other	CVE-2002-2134	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352430	-	alloy d-link eusso linksys wisecom	gl-2422ap-s dwl-900ap\+ gl2422_ap wap11 gl2422ap-0t	GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11…	NVD-CWE-Other	CVE-2002-2137	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed