Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2241 4.3 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-33460 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
2242 9.8 緊急
Network
Elasticsearch B.V. Logstash Elasticsearch B.V.のLogstashにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-33466 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
2243 4.3 警告
Network
EspoCRM EspoCRM EspoCRMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-33534 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
2244 7.8 重要
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-33632 2026-04-23 10:13 2026-03-26 Show GitHub Exploit DB Packet Storm
2245 5.4 警告
Network
EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-116
CWE-80
CVE-2026-33657 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
2246 3.1
Network
EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-367
CWE-918
CVE-2026-33659 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
2247 5.4 警告
Network
EspoCRM EspoCRM EspoCRMにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-33740 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
2248 5.3 警告
Network
The Go Project tiff The Go Projectのtiffにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2026-33809 2026-04-23 10:12 2026-03-25 Show GitHub Exploit DB Packet Storm
2249 5.5 警告
Local
jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-33947 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
2250 5.3 警告
Network
jqlang jq jqlangのjqにおける複数の脆弱性 CWE-170
CWE-20
CVE-2026-33948 2026-04-23 10:12 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314691 7.5 HIGH
Network
nicolas_boullis
debian
mah-jong
debian_linux
mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2004-0458 2024-01-9 12:29 2004-09-28 Show GitHub Exploit DB Packet Storm
314692 7.5 HIGH
Network
xchat xchat xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference. CWE-476
 NULL Pointer Dereference
CVE-2003-1000 2024-01-9 12:26 2004-01-5 Show GitHub Exploit DB Packet Storm
314693 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2022-29409 2024-01-9 07:15 2024-01-9 Show GitHub Exploit DB Packet Storm
314694 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6530. Reason: This candidate is a reservation duplicate of CVE-2023-6530. Notes: All CVE users should reference CV… - CVE-2023-5619 2024-01-5 05:15 2024-01-5 Show GitHub Exploit DB Packet Storm
314695 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-6991. Reason: This candidate is a reservation duplicate of CVE-2023-6991. Notes: All CVE users should reference C… - CVE-2023-5442 2024-01-5 04:15 2024-01-5 Show GitHub Exploit DB Packet Storm
314696 - - - Rejected reason: This CVE ID was unused by the CNA. - CVE-2022-43375 2024-01-4 16:15 2024-01-4 Show GitHub Exploit DB Packet Storm
314697 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none. - CVE-2023-52141 2024-01-4 07:15 2024-01-4 Show GitHub Exploit DB Packet Storm
314698 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. Notes: none. - CVE-2023-52140 2024-01-4 07:15 2024-01-4 Show GitHub Exploit DB Packet Storm
314699 9.8 CRITICAL
Network
- - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-46791 2024-01-3 07:15 2023-12-22 Show GitHub Exploit DB Packet Storm
314700 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2023-46799 2024-01-3 07:15 2023-11-8 Show GitHub Exploit DB Packet Storm