Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2231	5.3	警告 Network	Tokuhiro Matsuno (tokuhirom)	Amon2::Plugin::Web::CSRFDefender	Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性	CWE-338 CWE-340	CVE-2025-15604 CVE-2026-5082	2026-04-24 11:35	2026-04-8	Show	GitHub Exploit DB Packet Storm

2232	7.5	重要 Network	pyLoad	pyLoad	pyLoadにおける複数の脆弱性	CWE-502 CWE-863	CVE-2026-33509 CVE-2026-35464	2026-04-24 11:35	2026-04-7	Show	GitHub Exploit DB Packet Storm

2233	9.8	緊急 Network	Tomas Varaneckas	JAD Java Decompiler	Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2016-20049	2026-04-24 11:35	2026-03-28	Show	GitHub Exploit DB Packet Storm

2234	6.1	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-10242	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

2235	9.1	緊急 Network	WSO2	Identity Server as Key Manager WSO2 API Manager WSO2 Identity Server WSO2 Open Banking AM WSO2 Open Banking IAM	WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-2374	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

2236	5.4	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4867	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

2237	7.5	重要 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-8010	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

2238	5.4	警告 Network	WSO2	WSO2 Identity Server	WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-12624	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

2239	8.2	重要 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2025-31958	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

2240	5.3	警告 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-31981	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314641	-	ethereal_group	ethereal	Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.	NVD-CWE-Other	CVE-2003-0428	2024-02-14 10:17	2003-07-24	Show	GitHub Exploit DB Packet Storm

314642	-	ethereal_group	ethereal	The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering …	NVD-CWE-Other	CVE-2003-0429	2024-02-14 10:17	2003-07-24	Show	GitHub Exploit DB Packet Storm

314643	-	ethereal_group	ethereal	The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.	NVD-CWE-Other	CVE-2003-0430	2024-02-14 10:17	2003-07-24	Show	GitHub Exploit DB Packet Storm

314644	-	ethereal_group	ethereal	The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.	NVD-CWE-Other	CVE-2003-0431	2024-02-14 10:17	2003-07-24	Show	GitHub Exploit DB Packet Storm

314645	-	ethereal_group	ethereal	Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dis…	NVD-CWE-Other	CVE-2003-0432	2024-02-14 10:17	2003-07-24	Show	GitHub Exploit DB Packet Storm

314646	-	ethereal_group	ethereal	Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissecto…	NVD-CWE-Other	CVE-2003-0357	2024-02-14 10:17	2003-06-9	Show	GitHub Exploit DB Packet Storm

314647	-	miniportal	miniportal	admin.php in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an "adminok" value.	NVD-CWE-Other	CVE-2003-0272	2024-02-14 10:17	2003-05-27	Show	GitHub Exploit DB Packet Storm

314648	-	battleaxe_software	bttlxeforum	SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.	NVD-CWE-Other	CVE-2003-0215	2024-02-14 10:17	2003-05-12	Show	GitHub Exploit DB Packet Storm

314649	-	the_cacti_group	cacti	graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.	NVD-CWE-Other	CVE-2002-1477	2024-02-14 10:17	2003-04-22	Show	GitHub Exploit DB Packet Storm

314650	-	the_cacti_group	cacti	Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode.	NVD-CWE-Other	CVE-2002-1478	2024-02-14 10:17	2003-04-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed