Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2421 4.4 警告
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows 11 26h1
Microsoft Windows 10 22h2
Microsoft Windows 10 21h2
Microsoft Windows&… 		Windows Hello のセキュリティ機能のバイパスの脆弱性 CWE-20
不適切な入力確認 		CVE-2026-27906 2026-04-27 11:23 2026-04-14 Show GitHub Exploit DB Packet Storm
2422 7.5 重要
Network 		FFmpeg FFmpeg FFmpegにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-30997 2026-04-27 11:23 2026-04-13 Show GitHub Exploit DB Packet Storm
2423 7.5 重要
Network 		FFmpeg FFmpeg FFmpegにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-30998 2026-04-27 11:23 2026-04-13 Show GitHub Exploit DB Packet Storm
2424 7.5 重要
Network 		FFmpeg FFmpeg FFmpegにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-30999 2026-04-27 11:23 2026-04-13 Show GitHub Exploit DB Packet Storm
2425 8.8 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性 CWE-284
CWE-94
CVE-2026-31018 2026-04-27 11:23 2026-04-21 Show GitHub Exploit DB Packet Storm
2426 8.8 重要
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-31019 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
2427 3.5 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限 		CVE-2026-3254 2026-04-27 11:22 2026-04-22 Show GitHub Exploit DB Packet Storm
2428 9.9 緊急
Network 		Linux Foundation Spinnaker Linux FoundationのSpinnakerにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-32604 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
2429 9.9 緊急
Network 		Linux Foundation Spinnaker Linux FoundationのSpinnakerにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-32613 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
2430 7.8 重要
Local 		Podman project podman Podman projectのpodmanにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33414 2026-04-27 11:22 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351451 - linux linux_kernel The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappr… NVD-CWE-Other
CVE-2002-0499 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351452 - posadis posadis Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are … NVD-CWE-Other
CVE-2002-0501 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351453 - citrix nfuse Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter. NVD-CWE-Other
CVE-2002-0503 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351454 - citrix nfuse Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_… NVD-CWE-Other
CVE-2002-0504 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351455 - cisco call_manager Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) vi… NVD-CWE-Other
CVE-2002-0505 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351456 - redhat linux Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt. NVD-CWE-Other
CVE-2002-0506 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351457 - wwwisis wwwisis wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog. NVD-CWE-Other
CVE-2002-0508 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351458 - oracle oracle9i Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. NVD-CWE-Other
CVE-2002-0509 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351459 - linux linux_kernel The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… NVD-CWE-Other
CVE-2002-0510 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
351460 - nscd nscd The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou… NVD-CWE-Other
CVE-2002-0511 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm