Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2091 8.8 重要
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40157 2026-04-27 10:48 2026-04-10 Show GitHub Exploit DB Packet Storm
2092 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
CWE-noinfo
CVE-2026-40161 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
2093 8.1 重要
Network 		SysAdmins Media HomeBox SysAdmins MediaのHomeBoxにおける不適切な所有権の割り当てに関する脆弱性 CWE-708
不適切な所有権の割り当て 		CVE-2026-40196 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2094 2.7 低
Network 		OpenBao OpenBao OpenBaoにおけるセキュリティトークンの割り当ての制限に関する脆弱性 CWE-1259
セキュリティトークンの割り当ての不適切な制限 		CVE-2026-40264 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
2095 4.3 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40305 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2096 6.5 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-40306 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2097 8 重要
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-40321 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2098 5.3 警告
Network 		The FastAPI Expert python-multipart The FastAPI Expertのpython-multipartにおける複数の脆弱性 CWE-400
CWE-834
CVE-2026-40347 2026-04-27 10:48 2026-04-18 Show GitHub Exploit DB Packet Storm
2099 5.4 警告
Network 		wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
2100 7.6 重要
Network 		wger wger wger Projectのwgerにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314291 - cisco firewall_services_module
vpn_3000_concentrator_series_software
ios
adaptive_security_appliance_software
pix_firewall
mds_9000
mds_9000_san-os
pix_firewall_software 		Multiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in multiple Cisco products allow remote attackers to cause a denial of service (device reset) via ce… NVD-CWE-Other
CVE-2005-3669 2024-07-2 21:57 2005-11-19 Show GitHub Exploit DB Packet Storm
314292 - openbsd openssh A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and cor… NVD-CWE-Other
CVE-2003-0693 2024-07-1 20:15 2003-09-22 Show GitHub Exploit DB Packet Storm
314293 - openbsd openssh Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is usin… NVD-CWE-Other
CVE-2002-0640 2024-07-1 20:15 2002-07-3 Show GitHub Exploit DB Packet Storm
314294 - - - Rejected reason: CVE ID issued in error. This is not a valid vulnerability. - CVE-2024-5972 2024-06-29 04:15 2024-06-29 Show GitHub Exploit DB Packet Storm
314295 8.8 HIGH
Network 		microsoft office
works_suite 		Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a m… CWE-120
Classic Buffer Overflow 		CVE-2006-2492 2024-06-28 23:15 2006-05-20 Show GitHub Exploit DB Packet Storm
314296 - - - Rejected reason: This submission has been rejected by the CNA of record. Authentication is user configurable as described in our documentation.     https://enterprise.arcgis.com/en/server/latest/… - CVE-2024-37694 2024-06-28 05:15 2024-06-22 Show GitHub Exploit DB Packet Storm
314297 5.9 MEDIUM
Network 		cisco ios Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. NVD-CWE-noinfo
CVE-2004-1464 2024-06-28 04:22 2004-12-31 Show GitHub Exploit DB Packet Storm
314298 - linux
debian 		linux_kernel
debian_linux 		The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0298 2024-06-28 04:17 2010-02-13 Show GitHub Exploit DB Packet Storm
314299 - - - Rejected reason: This CVE is a duplicate of CVE-2024-38374. - CVE-2024-38515 2024-06-27 22:16 2024-06-27 Show GitHub Exploit DB Packet Storm
314300 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-6349 2024-06-27 00:15 2024-06-27 Show GitHub Exploit DB Packet Storm