Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2301 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27857 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2302 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27858 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2303 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27859 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2304 8.2 重要
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-121
CWE-400
CVE-2026-28221 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2305 9.9 緊急
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-30893 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2306 9 緊急
Network 		angular Angular CLI angularのAngular CLIにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-32635 2026-05-7 12:30 2026-03-16 Show GitHub Exploit DB Packet Storm
2307 6.5 警告
Network 		Ruby on Rails project rails Ruby on Rails projectのRailsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33658 2026-05-7 12:30 2026-03-26 Show GitHub Exploit DB Packet Storm
2308 9.8 緊急
Network 		ggml.ai llama.cpp ggml.aiのllama.cppにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-34159 2026-05-7 12:30 2026-04-1 Show GitHub Exploit DB Packet Storm
2309 7.8 重要
Local 		OpenClaw OpenClaw OpenClawにおける許容された入力値の許可リストに関する脆弱性 CWE-183
許容された入力値の許可リスト 		CVE-2026-41387 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
2310 6.5 警告
Network 		OpenClaw OpenClaw OpenClawにおける不完全な内部状態の区別に関する脆弱性 CWE-372
不完全な内部状態の区別 		CVE-2026-41388 2026-05-7 12:30 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318001 7.5 HIGH
Network 		cisco ip_phone_7940_firmware
ip_phone_7960_firmware 		Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages suc… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2005-2181 2024-02-9 05:45 2005-07-11 Show GitHub Exploit DB Packet Storm
318002 7.5 HIGH
Network 		grandstream bt-100_firmware Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spo… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2005-2182 2024-02-9 05:45 2005-07-11 Show GitHub Exploit DB Packet Storm
318003 9.8 CRITICAL
Network 		sgi irix The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a pass… CWE-346
 Origin Validation Error 		CVE-2003-0174 2024-02-9 05:45 2003-05-12 Show GitHub Exploit DB Packet Storm
318004 6.5 MEDIUM
Network 		ubbcentral ubb.threads Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow … CWE-352
 Origin Validation Error 		CVE-2005-2059 2024-02-9 05:44 2005-06-29 Show GitHub Exploit DB Packet Storm
318005 4.3 MEDIUM
Network 		invisioncommunity gallery Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) del… CWE-352
 Origin Validation Error 		CVE-2005-1947 2024-02-9 05:44 2005-06-9 Show GitHub Exploit DB Packet Storm
318006 9.8 CRITICAL
Network 		bea weblogic_server BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without ha… CWE-459
 Incomplete Cleanup 		CVE-2005-1744 2024-02-9 05:35 2005-05-24 Show GitHub Exploit DB Packet Storm
318007 7.5 HIGH
Network 		accessdata secureclean SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be … CWE-459
 Incomplete Cleanup 		CVE-2002-2070 2024-02-9 05:35 2002-12-31 Show GitHub Exploit DB Packet Storm
318008 7.5 HIGH
Network 		microsoft windows_nt Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing … CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-1999-1127 2024-02-9 05:35 1999-12-31 Show GitHub Exploit DB Packet Storm
318009 7.5 HIGH
Network 		tolvanen eraser Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2068 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
318010 7.5 HIGH
Network 		pgp personal_privacy PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2069 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm