Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 7, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1951	8.8	重要 Network	BMC Software	BMC FootPrints ITSM	BMC SoftwareのBMC FootPrints ITSMにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-71260	2026-04-24 11:38	2026-03-19	Show	GitHub Exploit DB Packet Storm

1952	6.1	警告 Network	アドビシステムズ	Adobe Connect Adobe Connect Desktop Application	アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-21331	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1953	5.4	警告 Network	オラクル	PeopleSoft Enterprise HCM Shared Components	オラクルのPeoplesoft Enterprise Hcm Shared Componentsにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22019	2026-04-24 11:38	2026-04-21	Show	GitHub Exploit DB Packet Storm

1954	6.1	警告 Adjacent	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-2399	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1955	4.3	警告 Network	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial ShutdownにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-2400	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1956	5	警告 Local	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-2401	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1957	5.3	警告 Network	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-2402	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1958	4.3	警告 Network	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおける入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2026-2403	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1959	5.3	警告 Network	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおけるエンコードおよびエスケープに関する脆弱性	CWE-116 不適切なエンコード、または出力のエスケープ	CVE-2026-2404	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

1960	6.5	警告 Network	Schneider Electric	PowerChute Serial Shutdown	Schneider Electric のPowerChute Serial Shutdownにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-2405	2026-04-24 11:38	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314491	9.8	CRITICAL Network	risearch	risearch risearch_pro	RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2004-2061	2024-02-9 04:56	2004-07-27	Show	GitHub Exploit DB Packet Storm

314492	9.8	CRITICAL Network	siemens	db4web	DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2002-1484	2024-02-9 04:56	2003-04-22	Show	GitHub Exploit DB Packet Storm

314493	7.5	HIGH Network	adobe	acrobat_reader acrobat	The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne…	CWE-611 XXE	CVE-2005-1306	2024-02-9 04:55	2005-06-15	Show	GitHub Exploit DB Packet Storm

314494	5.5	MEDIUM Local	dump_project	dump	dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.	CWE-667 Improper Locking	CVE-2002-1914	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

314495	5.5	MEDIUM Local	openbsd netbsd freebsd	openbsd netbsd freebsd	tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.	CWE-667 Improper Locking	CVE-2002-1915	2024-02-9 04:24	2002-12-31	Show	GitHub Exploit DB Packet Storm

314496	7.8	HIGH Local	microsoft	windows_2000	Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.	CWE-667 Improper Locking	CVE-2002-0051	2024-02-9 04:24	2002-04-4	Show	GitHub Exploit DB Packet Storm

314497	5.5	MEDIUM Local	concurrent_versions_software_project	concurrent_versions_software	Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use…	CWE-667 Improper Locking	CVE-2000-0338	2024-02-9 04:23	2000-04-23	Show	GitHub Exploit DB Packet Storm

314498	5.5	MEDIUM Local	qualcomm	qpopper	qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes.	CWE-667 Improper Locking	CVE-2000-1198	2024-02-9 04:22	2001-08-31	Show	GitHub Exploit DB Packet Storm

314499	9.8	CRITICAL Network	gnome debian	evolution debian_linux	Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte…	CWE-190 Integer Overflow or Wraparound	CVE-2005-0102	2024-02-9 03:39	2005-01-24	Show	GitHub Exploit DB Packet Storm

314500	9.8	CRITICAL Network	php opensuse suse	php opensuse linux_enterprise	The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corrupt…	CWE-190 Integer Overflow or Wraparound	CVE-2010-1866	2024-02-9 03:38	2010-05-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed