Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2621 5 警告
Network 		Weblate Weblate Weblateにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40256 2026-04-23 10:10 2026-04-15 Show GitHub Exploit DB Packet Storm
2622 7.8 重要
Local 		Debian
LibTIFF
レッドハット		 LibTIFF
Red Hat Enterprise Linux
Red Hat Hardened Images
Debian GNU/Linux 		Debian等の複数ベンダの製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-4775 2026-04-23 10:10 2026-03-24 Show GitHub Exploit DB Packet Storm
2623 5.5 警告
Local 		freedesktop.org
レッドハット		 Polkit
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux 		freedesktop.org等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-4897 2026-04-23 10:10 2026-03-26 Show GitHub Exploit DB Packet Storm
2624 9.9 緊急
Network 		レッドハット openshift ai レッドハットのopenshift aiにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入 		CVE-2026-5483 2026-04-23 10:10 2026-04-10 Show GitHub Exploit DB Packet Storm
2625 7.5 重要
Network 		ザイオソフト株式会社 Ziostation2 Ziostation2におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40062 2026-04-22 14:16 2026-04-22 Show GitHub Exploit DB Packet Storm
2626 7.8 重要
Local 		ジャパンメディアシステム株式会社 Windows PC用LiveOn Meetクライアントインストーラ
キヤノンネットワークカメラ用プラグインインストーラ 		LiveOn MeetのWindows PC用クライアントインストーラおよびプラグインインストーラにおける任意のDLL読み込みの脆弱性 CWE-Other
その他 		CVE-2026-32679 2026-04-22 14:08 2026-04-22 Show GitHub Exploit DB Packet Storm
2627 6.1 警告
Network 		DeepL DeepL DeepL Chrome拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40451 2026-04-22 12:06 2026-04-22 Show GitHub Exploit DB Packet Storm
2628 9.9 緊急
Network 		Percona Percona Monitoring and Management PerconaのPercona Monitoring and Managementにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行 		CVE-2026-25212 2026-04-22 10:10 2026-04-2 Show GitHub Exploit DB Packet Storm
2629 9.8 緊急
Network 		Progress Software Corporation ShareFile Storage Zone Controller Progress Software CorporationのShareFile Storage Zone Controllerにおける複数の脆弱性 CWE-284
CWE-698
CWE-noinfo
CVE-2026-2699 2026-04-22 10:10 2026-04-2 Show GitHub Exploit DB Packet Storm
2630 8.8 重要
Network 		Progress Software Corporation ShareFile Storage Zone Controller Progress Software CorporationのShareFile Storage Zone Controllerにおける複数の脆弱性 CWE-434
CWE-434
CWE-78
CWE-94
CVE-2026-2701 2026-04-22 10:10 2026-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350471 - redhat linux Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt. NVD-CWE-Other
CVE-2002-0506 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350472 - wwwisis wwwisis wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog. NVD-CWE-Other
CVE-2002-0508 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350473 - oracle oracle9i Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. NVD-CWE-Other
CVE-2002-0509 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350474 - linux linux_kernel The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… NVD-CWE-Other
CVE-2002-0510 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350475 - nscd nscd The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou… NVD-CWE-Other
CVE-2002-0511 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350476 - caldera openlinux_server
openlinux_workstation 		startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of oth… NVD-CWE-Other
CVE-2002-0512 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350477 - squirrelmail squirrelmail SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie. NVD-CWE-Other
CVE-2002-0516 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350478 - caldera unixware
openunix 		Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to progra… NVD-CWE-Other
CVE-2002-0517 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350479 - freebsd freebsd The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using synco… NVD-CWE-Other
CVE-2002-0518 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350480 - asp-nuke asp-nuke Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag. NVD-CWE-Other
CVE-2002-0520 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm