Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2711 6.3 警告
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33145 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2712 9.1 緊急
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33516 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2713 9.1 緊急
Network 		neutrinolabs xrdp neutrinolabsのxrdpにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-33689 2026-04-28 10:13 2026-04-17 Show GitHub Exploit DB Packet Storm
2714 2.9 低
Local 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34268 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2715 9.8 緊急
Network 		オラクル Oracle Advanced Inbound Telephony オラクルのOracle Advanced Inbound Telephonyにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-34275 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2716 7.5 重要
Network 		オラクル Oracle GraalVM for JDK
Oracle GraalVM
JRE
JDK 		オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34282 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2717 2.4 低
Network 		オラクル Oracle Database オラクルのOracle Databaseにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-34312 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2718 5.3 警告
Network 		Electron electron Electronのelectronにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34776 2026-04-28 10:13 2026-04-4 Show GitHub Exploit DB Packet Storm
2719 5.4 警告
Network 		オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35232 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
2720 6.4 警告
Network 		オラクル Oracle Fusion Middleware オラクルのOracle Fusion Middlewareにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35252 2026-04-28 10:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347571 - efax efax Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. NVD-CWE-Other
CVE-2002-0130 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347572 - activestate activepython ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attacke… NVD-CWE-Other
CVE-2002-0131 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347573 - avirt avirt_gateway
avirt_gateway_suite
avirt_soho 		Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string … NVD-CWE-Other
CVE-2002-0133 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347574 - avirt avirt_gateway_suite Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitra… NVD-CWE-Other
CVE-2002-0134 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347575 - andreas_mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. NVD-CWE-Other
CVE-2002-0137 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347576 - andreas_mueller cdrdao CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command. NVD-CWE-Other
CVE-2002-0138 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347577 - pi3 pi3web CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long an… NVD-CWE-Other
CVE-2002-0142 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
347578 - cisco secure_access_control_server Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash… CWE-134
Use of Externally-Controlled Format String 		CVE-2002-0159 2016-10-18 11:16 2002-04-22 Show GitHub Exploit DB Packet Storm
347579 - cisco secure_access_control_server The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image fil… NVD-CWE-Other
CVE-2002-0160 2016-10-18 11:16 2002-04-22 Show GitHub Exploit DB Packet Storm
347580 - logwatch logwatch LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. NVD-CWE-Other
CVE-2002-0162 2016-10-18 11:16 2002-03-27 Show GitHub Exploit DB Packet Storm