Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 5, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1561 7.2 重要
Network 		Sanjay Sharma (sanjay1313) Visitor-Management-System Sanjay Sharma (sanjay1313)のVisitor-Management-Systemにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2026-37748 2026-04-24 11:37 2026-04-21 Show GitHub Exploit DB Packet Storm
1562 7.5 重要
Network 		Little CMS Little CMS Little CMSにおける複数の脆弱性 CWE-190
CWE-696
CVE-2026-41254 2026-04-24 11:36 2026-04-18 Show GitHub Exploit DB Packet Storm
1563 5.3 警告
Network 		MetaCPAN BEROV Ado::Sessions MetaCPAN BEROVのAdo::Sessionsにおける複数の脆弱性 CWE-338
CWE-340
CVE-2026-5083 2026-04-24 11:36 2026-04-8 Show GitHub Exploit DB Packet Storm
1564 9.1 緊急
Network 		MCRAWFOR Solstice::Session MCRAWFORのSolstice::Sessionにおける複数の脆弱性 CWE-338
CWE-340
CVE-2026-5085 2026-04-24 11:36 2026-04-13 Show GitHub Exploit DB Packet Storm
1565 10 緊急
Network 		NWCLARK (Nicholas Clark) Storable NWCLARK (Nicholas Clark)のStorableにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2017-20230 2026-04-24 11:36 2026-04-21 Show GitHub Exploit DB Packet Storm
1566 9.8 緊急
Network 		ProSoft Technology ICX35-HWC Firmware ProSoft TechnologyのICX35-HWC Firmwareにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2017-20235 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
1567 9.8 緊急
Network 		ProSoft Technology ICX35-HWC Firmware ProSoft TechnologyのICX35-HWC FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2017-20236 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
1568 4.9 警告
Network 		Fortra GoAnywhere Agents
GoAnywhere Managed File Transfer 		FortraのGoAnywhere Agents等の複数製品における暗号強度に関する脆弱性 CWE-326
不適切な暗号強度 		CVE-2025-1241 2026-04-24 11:36 2026-04-21 Show GitHub Exploit DB Packet Storm
1569 7.3 重要
Network 		Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2025-14362 2026-04-24 11:36 2026-04-21 Show GitHub Exploit DB Packet Storm
1570 8.1 重要
Network 		Gardyn Gardin API GardynのGardin APIにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-25197 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314241 - nasm netwide_assembler Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194. CWE-787
 Out-of-bounds Write 		CVE-2004-1287 2023-12-23 02:15 2005-01-10 Show GitHub Exploit DB Packet Storm
314242 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-45292. Reason: This record is a reservation duplicate of CVE-2023-45292. Notes: All CVE users should reference CVE-2023-45292 instead… - CVE-2023-50119 2023-12-22 00:15 2023-12-22 Show GitHub Exploit DB Packet Storm
314243 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-42927 2023-12-21 02:15 2023-12-12 Show GitHub Exploit DB Packet Storm
314244 - - - Rejected reason: This flaw was found to be a duplicate of CVE-2023-6927. Please see https://access.redhat.com/security/cve/CVE-2023-6927 for information about affected products and security errata. - CVE-2023-6920 2023-12-19 02:15 2023-12-19 Show GitHub Exploit DB Packet Storm
314245 - - - Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2804. Reason: This record is a duplicate of CVE-2023-2804. Notes: All CVE users should reference CVE-2023-2804 instead of this record… - CVE-2023-31813 2023-12-16 11:15 2023-12-16 Show GitHub Exploit DB Packet Storm
314246 - microsoft windows_embedded_compact WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. NVD-CWE-Other
CVE-2001-0162 2023-12-16 04:06 2001-01-1 Show GitHub Exploit DB Packet Storm
314247 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2023-27171 2023-12-13 23:15 2023-12-13 Show GitHub Exploit DB Packet Storm
314248 - microsoft directx Unspecified vulnerability in Quartz.dll for DirectShow on Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1, and Server 2008 allows remote attackers to execute arbitrary code via… CWE-94
Code Injection 		CVE-2010-1880 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm
314249 - microsoft internet_explorer Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory… CWE-94
Code Injection 		CVE-2010-1262 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm
314250 - microsoft internet_explorer The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initializ… CWE-94
Code Injection 		CVE-2010-1261 2023-12-8 03:38 2010-06-9 Show GitHub Exploit DB Packet Storm