Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2491 8.8 重要
Network
minerva minerva Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-5779 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
2492 8.1 重要
Network
minerva minerva Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-5780 2026-05-7 10:52 2026-04-28 Show GitHub Exploit DB Packet Storm
2493 8.8 重要
Network
Frappe ERPNext FrappeのERPNextにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2023-54345 2026-05-7 10:52 2026-05-5 Show GitHub Exploit DB Packet Storm
2494 7.5 重要
Network
OpenEMR OpenEMR OpenEMRにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2023-54347 2026-05-7 10:52 2026-05-5 Show GitHub Exploit DB Packet Storm
2495 7.2 重要
Network
デル data domain operating system デルのdata domain operating systemにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2025-46607 2026-05-7 10:52 2026-04-17 Show GitHub Exploit DB Packet Storm
2496 6.6 警告
Network
デル data domain operating system デルのdata domain operating systemにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2025-46641 2026-05-7 10:52 2026-04-17 Show GitHub Exploit DB Packet Storm
2497 8.8 重要
Adjacent
Google Android GoogleのAndroidにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題
CVE-2026-0073 2026-05-7 10:52 2026-05-4 Show GitHub Exploit DB Packet Storm
2498 8 重要
Adjacent
SonicWALL SonicOS SonicWALLのSonicOSにおける複数の脆弱性 CWE-1390
CWE-306
CVE-2026-0204 2026-05-7 10:52 2026-04-29 Show GitHub Exploit DB Packet Storm
2499 6.8 警告
Adjacent
SonicWALL SonicOS SonicWALLのSonicOSにおけるパストラバーサルの脆弱性 CWE-35
パストラバーサル
CVE-2026-0205 2026-05-7 10:52 2026-04-29 Show GitHub Exploit DB Packet Storm
2500 4.9 警告
Network
SonicWALL SonicOS SonicWALLのSonicOSにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-0206 2026-05-7 10:52 2026-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317681 9.8 CRITICAL
Network
zlib zlib The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow … CWE-415
 Double Free
CVE-2002-0059 2024-02-3 00:16 2002-03-15 Show GitHub Exploit DB Packet Storm
317682 - linux linux_kernel Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of… CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2005-3119 2024-02-3 00:13 2005-10-12 Show GitHub Exploit DB Packet Storm
317683 - mit
redhat
mandrakesoft
kerberos_ftp_client
linux
mandrake_linux
mandrake_multi_network_firewall
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client. CWE-78
OS Command 
CVE-2003-0041 2024-02-3 00:13 2003-02-19 Show GitHub Exploit DB Packet Storm
317684 - apple terminal Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window. CWE-78
OS Command 
CVE-2002-1898 2024-02-3 00:13 2002-12-31 Show GitHub Exploit DB Packet Storm
317685 9.8 CRITICAL
Network
gaim_project gaim Buffer overflow in the AIM and ICQ module in Gaim before 1.5.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an away message with a … CWE-131
Incorrect Calculation of Buffer Size
CVE-2005-2103 2024-02-3 00:02 2005-08-16 Show GitHub Exploit DB Packet Storm
317686 6.5 MEDIUM
Network
xmlsoft libxml2 libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a cr… CWE-776
XML Entity Expansion
CVE-2003-1564 2024-02-2 23:10 2003-12-31 Show GitHub Exploit DB Packet Storm
317687 7.8 HIGH
Local
apache http_server Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables. CWE-131
Incorrect Calculation of Buffer Size
CVE-2004-0747 2024-02-2 23:03 2004-10-20 Show GitHub Exploit DB Packet Storm
317688 9.8 CRITICAL
Network
oracle database_server
application_server
e-business_suite
enterprise_manager
enterprise_manager_grid_control
enterprise_manager_database_control
collaboration_suite
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed. CWE-131
Incorrect Calculation of Buffer Size
CVE-2004-1363 2024-02-2 23:01 2004-08-4 Show GitHub Exploit DB Packet Storm
317689 9.8 CRITICAL
Network
invisible-island
debian
lynx
debian_linux
Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Ly… CWE-131
Incorrect Calculation of Buffer Size
CVE-2005-3120 2024-02-2 23:00 2005-10-18 Show GitHub Exploit DB Packet Storm
317690 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. ConsultIDs: none. Reason: This CVE ID is unused by its CNA. Notes: none. - CVE-2024-25001 2024-02-2 18:15 2024-02-2 Show GitHub Exploit DB Packet Storm