Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2681 7.6 重要
Network 		OpenClaw OpenClaw OpenClawにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-41912 2026-05-7 12:29 2026-04-28 Show GitHub Exploit DB Packet Storm
2682 7.5 重要
Network 		FreeBSD FreeBSD FreeBSDにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-4247 2026-05-7 12:29 2026-03-26 Show GitHub Exploit DB Packet Storm
2683 7.5 重要
Network 		レッドハット
libarchive		 Red Hat Enterprise Linux Server AUS
Red Hat Hardened Images
openshift container platform for power
Red Hat Enterprise&nb… 		libarchive等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-4424 2026-05-7 12:29 2026-03-19 Show GitHub Exploit DB Packet Storm
2684 7.5 重要
Network 		FreeBSD FreeBSD FreeBSDにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-4652 2026-05-7 12:29 2026-03-26 Show GitHub Exploit DB Packet Storm
2685 5.5 警告
Local 		レッドハット
firewalld		 firewalld
Red Hat Enterprise Linux 		firewalld等の複数ベンダの製品における割り当てられたパーミッションの実行に関する脆弱性 CWE-279
割り当てられたパーミッションの不適切な実行 		CVE-2026-4948 2026-05-7 12:29 2026-03-27 Show GitHub Exploit DB Packet Storm
2686 10 緊急
Network 		huggingface smolagents huggingfaceのsmolagentsにおける複数の脆弱性 CWE-74
CWE-94
CVE-2026-4963 2026-05-7 12:29 2026-03-27 Show GitHub Exploit DB Packet Storm
2687 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. ch22 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のch22 ファームウェアにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-5154 2026-05-7 12:28 2026-03-30 Show GitHub Exploit DB Packet Storm
2688 9.8 緊急
Network 		TRENDnet TEW-713RE FIRMWARE TRENDnetのTEW-713RE FIRMWAREにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-5183 2026-05-7 12:28 2026-03-31 Show GitHub Exploit DB Packet Storm
2689 8.8 重要
Network 		nothings stb_truetype.h nothingsのstb_truetype.hにおける複数の脆弱性 CWE-119
CWE-125
CVE-2026-5314 2026-05-7 12:28 2026-04-1 Show GitHub Exploit DB Packet Storm
2690 8.8 重要
Network 		nothings stb_truetype.h nothingsのstb_truetype.hにおける複数の脆弱性 CWE-119
CWE-125
CVE-2026-5315 2026-05-7 12:28 2026-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318111 5.5 MEDIUM
Local 		icq icq ICQwebmail client for ICQ 2000A creates a world readable temporary file during login and does not delete it, which allows local users to obtain sensitive information. CWE-459
 Incomplete Cleanup 		CVE-2000-0552 2024-02-9 05:12 2000-06-6 Show GitHub Exploit DB Packet Storm
318112 9.8 CRITICAL
Network 		risearch risearch
risearch_pro 		RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, o… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2004-2061 2024-02-9 04:56 2004-07-27 Show GitHub Exploit DB Packet Storm
318113 9.8 CRITICAL
Network 		siemens db4web DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that sp… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2002-1484 2024-02-9 04:56 2003-04-22 Show GitHub Exploit DB Packet Storm
318114 7.5 HIGH
Network 		adobe acrobat_reader
acrobat 		The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the "XML External Entity vulne… CWE-611
XXE 		CVE-2005-1306 2024-02-9 04:55 2005-06-15 Show GitHub Exploit DB Packet Storm
318115 5.5 MEDIUM
Local 		dump_project dump dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file. CWE-667
 Improper Locking 		CVE-2002-1914 2024-02-9 04:24 2002-12-31 Show GitHub Exploit DB Packet Storm
318116 5.5 MEDIUM
Local 		openbsd
netbsd
freebsd 		openbsd
netbsd
freebsd 		tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file. CWE-667
 Improper Locking 		CVE-2002-1915 2024-02-9 04:24 2002-12-31 Show GitHub Exploit DB Packet Storm
318117 7.8 HIGH
Local 		microsoft windows_2000 Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. CWE-667
 Improper Locking 		CVE-2002-0051 2024-02-9 04:24 2002-04-4 Show GitHub Exploit DB Packet Storm
318118 5.5 MEDIUM
Local 		concurrent_versions_software_project concurrent_versions_software Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service by creating the lock directory before it is created for use… CWE-667
 Improper Locking 		CVE-2000-0338 2024-02-9 04:23 2000-04-23 Show GitHub Exploit DB Packet Storm
318119 5.5 MEDIUM
Local 		qualcomm qpopper qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. CWE-667
 Improper Locking 		CVE-2000-1198 2024-02-9 04:22 2001-08-31 Show GitHub Exploit DB Packet Storm
318120 9.8 CRITICAL
Network 		gnome
debian 		evolution
debian_linux 		Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte… CWE-190
 Integer Overflow or Wraparound 		CVE-2005-0102 2024-02-9 03:39 2005-01-24 Show GitHub Exploit DB Packet Storm