Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2231 6.4 警告
Network 		Canonical Juju CanonicalのJujuにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-5774 2026-04-24 11:40 2026-04-10 Show GitHub Exploit DB Packet Storm
2232 7.8 重要
Local 		CivetWeb project CivetWeb CivetWeb projectのCivetWebにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2026-5789 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2233 7.4 重要
Network 		Eclipse Foundation Jetty Eclipse FoundationのJettyにおける複数の脆弱性 CWE-226
CWE-287
CVE-2026-5795 2026-04-24 11:40 2026-04-8 Show GitHub Exploit DB Packet Storm
2234 7.5 重要
Network 		GNU Project GNU C Library GNU ProjectのGNU C Libraryにおけるバッファアンダーリードの脆弱性 CWE-127
バッファアンダーリード 		CVE-2026-5928 2026-04-24 11:40 2026-04-20 Show GitHub Exploit DB Packet Storm
2235 7.1 重要
Network 		ConnectWise, Inc. automate ConnectWise, Inc.のautomateにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2026-6066 2026-04-24 11:40 2026-04-20 Show GitHub Exploit DB Packet Storm
2236 9.1 緊急
Network 		Open JS Foundation fastify/middie Open JS Foundationの@fastify/middieにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合 		CVE-2026-6270 2026-04-24 11:40 2026-04-16 Show GitHub Exploit DB Packet Storm
2237 9.9 緊急
Network 		ASUSTOR Inc. data master ASUSTOR Inc.のdata masterにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-6643 2026-04-24 11:40 2026-04-20 Show GitHub Exploit DB Packet Storm
2238 9.1 緊急
Network 		ASUSTOR Inc. data master ASUSTOR Inc.のdata masterにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-6644 2026-04-24 11:40 2026-04-20 Show GitHub Exploit DB Packet Storm
2239 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6746 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2240 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6747 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314651 - the_cacti_group cacti Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly g… NVD-CWE-Other
CVE-2002-1479 2024-02-14 10:17 2003-04-22 Show GitHub Exploit DB Packet Storm
314652 - endity.com shoutbox Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter. NVD-CWE-Other
CVE-2002-1429 2024-02-14 10:17 2003-04-11 Show GitHub Exploit DB Packet Storm
314653 - ethereal_group ethereal Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code. NVD-CWE-Other
CVE-2003-0159 2024-02-14 10:17 2003-04-2 Show GitHub Exploit DB Packet Storm
314654 - ethereal_group ethereal Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string spec… NVD-CWE-Other
CVE-2003-0081 2024-02-14 10:17 2003-03-18 Show GitHub Exploit DB Packet Storm
314655 - pingtel xpressa Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the phys… NVD-CWE-Other
CVE-2002-1934 2024-02-14 10:17 2002-12-31 Show GitHub Exploit DB Packet Storm
314656 - pingtel xpressa Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to… NVD-CWE-Other
CVE-2002-1935 2024-02-14 10:17 2002-12-31 Show GitHub Exploit DB Packet Storm
314657 - francisco_burzi php-nuke sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.p… NVD-CWE-Other
CVE-2002-2032 2024-02-14 10:17 2002-12-31 Show GitHub Exploit DB Packet Storm
314658 - microsoft windows_xp Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). NVD-CWE-Other
CVE-2002-2117 2024-02-14 10:17 2002-12-31 Show GitHub Exploit DB Packet Storm
314659 - comscripts web_server_creator Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to cust… NVD-CWE-Other
CVE-2002-2217 2024-02-14 10:17 2002-12-31 Show GitHub Exploit DB Packet Storm
314660 - ethereal_group ethereal Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages. NVD-CWE-Other
CVE-2002-1355 2024-02-14 10:17 2002-12-23 Show GitHub Exploit DB Packet Storm