Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2741 4.3 警告
Network
Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおけるアクセス制御の不十分な粒度に関する脆弱性 CWE-1220
アクセス制御の不十分な粒度
CVE-2026-40690 2026-04-28 10:12 2026-04-24 Show GitHub Exploit DB Packet Storm
2742 6.1 警告
Network
Astro Astro Astroにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-41067 2026-04-28 10:12 2026-04-24 Show GitHub Exploit DB Packet Storm
2743 5.4 警告
Adjacent
OpenPrinting CUPS OpenPrintingのCUPSにおける複数の脆弱性 CWE-125
CWE-200
CVE-2026-41079 2026-04-28 10:11 2026-04-24 Show GitHub Exploit DB Packet Storm
2744 6.6 警告
Local
Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-41411 2026-04-28 10:11 2026-04-24 Show GitHub Exploit DB Packet Storm
2745 7.1 重要
Network
Foxit eSign FoxitのeSignにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-4947 2026-04-28 10:11 2026-04-1 Show GitHub Exploit DB Packet Storm
2746 7.8 重要
Local
Rubicon Communications, LLC (Netgate). AMITI Antivirus Rubicon Communications, LLC (Netgate).のAMITI Antivirusにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素
CVE-2016-20058 2026-04-28 10:11 2026-04-4 Show GitHub Exploit DB Packet Storm
2747 5.5 警告
Local
CompuPhase Termite CompuPhaseのTermiteにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2018-25253 2026-04-28 10:11 2026-04-4 Show GitHub Exploit DB Packet Storm
2748 9.8 緊急
Network
NICO-FTP Project NICO-FTP NICO-FTP ProjectのNICO-FTPにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2018-25254 2026-04-28 10:11 2026-04-4 Show GitHub Exploit DB Packet Storm
2749 5.5 警告
Local
ks-soft IP-Tools KS-SoftのIP-Toolsにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2018-25256 2026-04-28 10:11 2026-04-5 Show GitHub Exploit DB Packet Storm
2750 7.8 重要
Local
River Past Cam Do Project River Past Cam Do River Past Cam Do ProjectのRiver Past Cam Doにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード
CVE-2019-25626 2026-04-28 10:11 2026-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351581 - mailscanner mailscanner MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate c… CWE-20
 Improper Input Validation 
CVE-2002-2228 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351582 - sapio_design_ltd webreflex Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request. CWE-22
Path Traversal
CVE-2002-2229 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351583 - mollensoft_software enceladus_server_suite Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2002-2232 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351584 - netscreen screenos NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests. CWE-16
Configuration
CVE-2002-2234 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351585 - jelsoft vbulletin member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which fac… CWE-189
Numeric Errors
CVE-2002-2235 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351586 - apt-www-proxy apt-www-proxy Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code. CWE-20
 Improper Input Validation 
CVE-2002-2236 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351587 - netbsd ftpd ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls an… CWE-189
Numeric Errors
CVE-2002-2245 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351588 - hp secure_web_server_for_tru64 Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might… NVD-CWE-noinfo
CVE-2002-2264 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351589 - hp secure_web_server_for_tru64 More Information: http://www.securityfocus.com/bid/6175/info NVD-CWE-noinfo
CVE-2002-2264 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351590 - pyramid benhur_software_update The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20. NVD-CWE-Other
CVE-2002-2307 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm