Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2641	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6746	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2642	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6747	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2643	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6748	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2644	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-6749	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2645	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6750	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2646	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6751	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2647	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6752	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2648	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6753	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2649	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6754	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

2650	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-6755	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348191	-	freebsd mandrakesoft redhat turbolinux	freebsd mandrake_linux linux turbolinux	Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.	NVD-CWE-Other	CVE-2000-0186	2008-09-11 04:03	2000-02-28	Show	GitHub Exploit DB Packet Storm

348192	-	alex_heiphetz_group	ezshopper	EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0187	2008-09-11 04:03	2000-02-27	Show	GitHub Exploit DB Packet Storm

348193	-	alex_heiphetz_group	ezshopper	EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0188	2008-09-11 04:03	2000-02-27	Show	GitHub Exploit DB Packet Storm

348194	-	allaire	coldfusion_server	ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.	NVD-CWE-Other	CVE-2000-0189	2008-09-11 04:03	2000-03-1	Show	GitHub Exploit DB Packet Storm

348195	-	aol	instant_messenger	AOL Instant Messenger (AIM) client allows remote attackers to cause a denial of service via a message with a malformed ASCII value.	NVD-CWE-Other	CVE-2000-0190	2008-09-11 04:03	2000-03-2	Show	GitHub Exploit DB Packet Storm

348196	-	caldera	openlinux	The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system.	NVD-CWE-Other	CVE-2000-0192	2008-09-11 04:03	2000-03-5	Show	GitHub Exploit DB Packet Storm

348197	-	corel	linux	buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.	NVD-CWE-Other	CVE-2000-0194	2008-09-11 04:03	2000-02-24	Show	GitHub Exploit DB Packet Storm

348198	-	corel	linux	setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverrc file.	NVD-CWE-Other	CVE-2000-0195	2008-09-11 04:03	2000-02-24	Show	GitHub Exploit DB Packet Storm

348199	-	nmh redhat turbolinux	nmh linux turbolinux	Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME headers in an email message.	NVD-CWE-Other	CVE-2000-0196	2008-09-11 04:03	2000-02-28	Show	GitHub Exploit DB Packet Storm

348200	-	microsoft	windows_nt	The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file …	NVD-CWE-Other	CVE-2000-0197	2008-09-11 04:03	2000-02-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed