Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2301 9.8 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-15379 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
2302 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-15381 2026-04-30 12:17 2026-03-27 Show GitHub Exploit DB Packet Storm
2303 7.5 重要
Network 		Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおけるメモリ管理ルーチンの不一致に関する脆弱性 CWE-762
メモリ管理ルーチンの不一致 		CVE-2025-48431 2026-04-30 12:17 2026-04-28 Show GitHub Exploit DB Packet Storm
2304 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2025-59969 2026-04-30 12:17 2026-04-9 Show GitHub Exploit DB Packet Storm
2305 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1839 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
2306 6.1 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20059 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
2307 4.7 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-20060 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
2308 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-20061 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
2309 6.5 警告
Local 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-20064 2026-04-30 12:17 2026-03-4 Show GitHub Exploit DB Packet Storm
2310 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-20078 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347071 - suse suse_linux SuSEconfig.javarunt in the javarunt package on SuSE Linux 7.3Pro allows local users to overwrite arbitrary files via a symlink attack on the .java_wrapper temporary file. NVD-CWE-Other
CVE-2003-0846 2016-10-18 11:37 2003-11-17 Show GitHub Exploit DB Packet Storm
347072 - suse suse_linux SuSEconfig.susewm in the susewm package on SuSE Linux 8.2Pro allows local users to overwrite arbitrary files via a symlink attack on the susewm.$$ temporary file. NVD-CWE-Other
CVE-2003-0847 2016-10-18 11:37 2003-11-17 Show GitHub Exploit DB Packet Storm
347073 - peoplesoft peopletools PeopleSoft Gateway Administration servlet (gateway.administration) in PeopleTools 8.43 and earlier allows remote attackers to obtain the full pathnames for server-side include (SSI) files via an HTTP… NVD-CWE-Other
CVE-2003-0628 2016-10-18 11:36 2003-12-15 Show GitHub Exploit DB Packet Storm
347074 - peoplesoft peopletools Cross-site scripting (XSS) vulnerability in PeopleSoft IScript environment for PeopleTools 8.43 and earlier allows remote attackers to insert arbitrary web script via a certain HTTP request to IScrip… NVD-CWE-Other
CVE-2003-0629 2016-10-18 11:36 2003-12-15 Show GitHub Exploit DB Packet Storm
347075 - atari800 atari800 Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator (atari800) before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrate… NVD-CWE-Other
CVE-2003-0630 2016-10-18 11:36 2003-10-20 Show GitHub Exploit DB Packet Storm
347076 - vmware gsx_server
workstation 		VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual ma… NVD-CWE-Other
CVE-2003-0631 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347077 - oracle applications
e-business_suite 		Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrar… NVD-CWE-Other
CVE-2003-0632 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347078 - oracle applications
e-business_suite 		Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without… NVD-CWE-Other
CVE-2003-0633 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347079 - novell ichain Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM. NVD-CWE-Other
CVE-2003-0635 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347080 - novell ichain Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execute arbitrary code via… NVD-CWE-Other
CVE-2003-0638 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm