Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2161 10 緊急
Network 		dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2162 8.2 重要
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
2163 6.5 警告
Network 		external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2164 8.1 重要
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
2165 9.1 緊急
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
2166 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2167 7.2 重要
Network 		Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2168 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける複数の脆弱性 CWE-1289
CWE-345
CWE-706
CVE-2026-35039 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2169 5.3 警告
Network 		WWBN AVideo WWBNのAVideoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-35179 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
2170 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35196 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347841 - zope zope Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by modifying the roles list that is included in a request. NVD-CWE-Other
CVE-2000-0725 2008-09-11 04:05 2000-10-20 Show GitHub Exploit DB Packet Storm
347842 - netbsd
openbsd
redhat 		netbsd
openbsd
linux 		Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name. NVD-CWE-Other
CVE-2000-0750 2008-09-11 04:05 2000-10-20 Show GitHub Exploit DB Packet Storm
347843 - checkpoint firewall-1 Checkpoint Firewall-1 with the RSH/REXEC setting enabled allows remote attackers to bypass access restrictions and connect to a RSH/REXEC client via malformed connection requests. NVD-CWE-Other
CVE-2000-0779 2008-09-11 04:05 2000-10-20 Show GitHub Exploit DB Packet Storm
347844 - xchat xchat IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser. NVD-CWE-Other
CVE-2000-0787 2008-09-11 04:05 2000-10-20 Show GitHub Exploit DB Packet Storm
347845 - suse suse_linux String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges. NVD-CWE-Other
CVE-2000-0800 2008-09-11 04:05 2000-10-20 Show GitHub Exploit DB Packet Storm
347846 - sgi irix The default installation of IRIX Performance Copilot allows remote attackers to access sensitive system information via the pmcd daemon. NVD-CWE-Other
CVE-2000-0283 2008-09-11 04:04 2000-04-12 Show GitHub Exploit DB Packet Storm
347847 - university_of_washington imap Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands. NVD-CWE-Other
CVE-2000-0284 2008-09-11 04:04 2000-04-16 Show GitHub Exploit DB Packet Storm
347848 - xfree86_project x11r6 Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. NVD-CWE-Other
CVE-2000-0285 2008-09-11 04:04 2000-04-16 Show GitHub Exploit DB Packet Storm
347849 - redhat linux X fontserver xfs allows local users to cause a denial of service via malformed input to the server. NVD-CWE-Other
CVE-2000-0286 2008-09-11 04:04 2000-04-16 Show GitHub Exploit DB Packet Storm
347850 - cnc technology_bizdb The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter. NVD-CWE-Other
CVE-2000-0287 2008-09-11 04:04 2000-04-12 Show GitHub Exploit DB Packet Storm