Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2181 6.1 警告
Network 		Apache Software Foundation Apache Wicket Apache Software FoundationのApache Wicketにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42509 2026-05-8 12:22 2026-05-6 Show GitHub Exploit DB Packet Storm
2182 4.3 警告
Network 		Jenkins プロジェクト Script Security JenkinsのScript Securityにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-42519 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2183 7.5 重要
Network 		Jenkins プロジェクト Credentials Binding JenkinsのCredentials Bindingにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42520 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2184 6.5 警告
Network 		Jenkins プロジェクト Matrix Authorization Strategy JenkinsのMatrix Authorization Strategyにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-42521 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2185 4.3 警告
Network 		Jenkins プロジェクト GitHub Branch Source JenkinsのGitHub Branch Sourceにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-42522 2026-05-8 12:22 2026-04-29 Show GitHub Exploit DB Packet Storm
2186 7.5 重要
Network 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-43057 2026-05-8 12:22 2026-05-1 Show GitHub Exploit DB Packet Storm
2187 9.3 緊急
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-43526 2026-05-8 12:22 2026-05-5 Show GitHub Exploit DB Packet Storm
2188 7.7 重要
Network 		OpenClaw OpenClaw OpenClawにおける複数の脆弱性 CWE-1188
CWE-918
CVE-2026-43527 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
2189 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける保存または転送前の重要な情報の削除に関する脆弱性 CWE-212
保存または転送前の重要な情報の不適切な削除 		CVE-2026-43528 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
2190 2.5 低
Local 		OpenClaw OpenClaw OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-43529 2026-05-8 12:21 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318071 - mit
redhat
mandrakesoft 		kerberos_ftp_client
linux
mandrake_linux
mandrake_multi_network_firewall 		Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client. CWE-78
OS Command  		CVE-2003-0041 2024-02-3 00:13 2003-02-19 Show GitHub Exploit DB Packet Storm
318072 - apple terminal Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window. CWE-78
OS Command  		CVE-2002-1898 2024-02-3 00:13 2002-12-31 Show GitHub Exploit DB Packet Storm
318073 9.8 CRITICAL
Network 		gaim_project gaim Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a … CWE-131
Incorrect Calculation of Buffer Size 		CVE-2005-2103 2024-02-3 00:02 2005-08-16 Show GitHub Exploit DB Packet Storm
318074 6.5 MEDIUM
Network 		xmlsoft libxml2 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a cr… CWE-776
XML Entity Expansion 		CVE-2003-1564 2024-02-2 23:10 2003-12-31 Show GitHub Exploit DB Packet Storm
318075 7.8 HIGH
Local 		apache http_server Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables. CWE-131
Incorrect Calculation of Buffer Size 		CVE-2004-0747 2024-02-2 23:03 2004-10-20 Show GitHub Exploit DB Packet Storm
318076 9.8 CRITICAL
Network 		oracle database_server
application_server
e-business_suite
enterprise_manager
enterprise_manager_grid_control
enterprise_manager_database_control
collaboration_suite 		Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed. CWE-131
Incorrect Calculation of Buffer Size 		CVE-2004-1363 2024-02-2 23:01 2004-08-4 Show GitHub Exploit DB Packet Storm
318077 9.8 CRITICAL
Network 		invisible-island
debian 		lynx
debian_linux 		Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Ly… CWE-131
Incorrect Calculation of Buffer Size 		CVE-2005-3120 2024-02-2 23:00 2005-10-18 Show GitHub Exploit DB Packet Storm
318078 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. ConsultIDs: none. Reason: This CVE ID is unused by its CNA. Notes: none. - CVE-2024-25001 2024-02-2 18:15 2024-02-2 Show GitHub Exploit DB Packet Storm
318079 - joomla joomla\! Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2005-4650 2024-02-2 12:07 2005-12-31 Show GitHub Exploit DB Packet Storm
318080 7.5 HIGH
Network 		microsoft internet_information_server FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded. CWE-131
Incorrect Calculation of Buffer Size 		CVE-2001-0334 2024-02-2 12:06 2001-06-27 Show GitHub Exploit DB Packet Storm