Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2071 7.5 重要
Network 		Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-34480 2026-04-27 10:49 2026-04-10 Show GitHub Exploit DB Packet Storm
2072 7.5 重要
Network 		Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-34481 2026-04-27 10:49 2026-04-10 Show GitHub Exploit DB Packet Storm
2073 7.5 重要
Network 		Christian Neukirchen Rack Rackにおける複数の脆弱性 CWE-400
CWE-407
CWE-770
CVE-2026-34827 2026-04-27 10:49 2026-04-2 Show GitHub Exploit DB Packet Storm
2074 6.5 警告
Network 		Glances project Glances Nicolas Hennion (nicolargo)のGlancesにおける複数の脆弱性 CWE-200
CWE-306
CWE-306
CWE-942
CVE-2026-34839 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2075 5.7 警告
Network 		オラクル PeopleSoft Enterprise CS Student Records オラクルのPeopleSoft Enterprise CS Student Recordsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35241 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2076 7.8 重要
Local 		オラクル Oracle Application Development Framework (Oracle ADF) オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35243 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
2077 7.5 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35405 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
2078 8.2 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35457 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
2079 8.8 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35463 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
2080 5.3 警告
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35483 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350091 - kerio personal_firewall Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood. NVD-CWE-Other
CVE-2002-2161 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350092 - cerulean_studios trillian Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user account… NVD-CWE-Other
CVE-2002-2162 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350093 - killervault kvpoll KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php. NVD-CWE-Other
CVE-2002-2163 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350094 - microsoft outlook_express Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link. NVD-CWE-Other
CVE-2002-2164 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350095 - imho imho_webmail The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox. NVD-CWE-Other
CVE-2002-2165 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350096 - e-zone_media_inc. fusetalk Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script. NVD-CWE-Other
CVE-2002-2166 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350097 - thorsten_korner 123tkshop Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null… NVD-CWE-Other
CVE-2002-2167 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350098 - thorsten_korner 123tkshop SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php. NVD-CWE-Other
CVE-2002-2168 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350099 - aol instant_messenger Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a use… NVD-CWE-Other
CVE-2002-2169 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350100 - working_resources_inc. badblue Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, whic… NVD-CWE-Other
CVE-2002-2170 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm