Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2751 6.6 警告
Local 		Saurabh Kumar python-dotenv Saurabh Kumarのpython-dotenvにおける複数の脆弱性 CWE-59
CWE-61
CVE-2026-28684 2026-04-28 10:11 2026-04-20 Show GitHub Exploit DB Packet Storm
2752 10 緊急
Network 		Smallstep Step CA SmallstepのStep CAにおける複数の脆弱性 CWE-287
CWE-295
CWE-295
CVE-2026-30836 2026-04-28 10:11 2026-03-19 Show GitHub Exploit DB Packet Storm
2753 4.7 警告
Local 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-32290 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2754 6.8 警告
Physics 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32291 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2755 7.5 重要
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-32292 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2756 3.7 低
Network 		GL.iNet Comet (GL-RM1) Firmware GL.iNetのComet (GL-RM1) Firmwareにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-32293 2026-04-28 10:11 2026-03-17 Show GitHub Exploit DB Packet Storm
2757 6.5 警告
Network 		オラクル PeopleSoft Enterprise FIN Contracts オラクルのPeopleSoft Enterprise FIN Contractsにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34300 2026-04-28 10:11 2026-04-21 Show GitHub Exploit DB Packet Storm
2758 3.7 低
Network 		Smallstep Step CA SmallstepのStep CAにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証 		CVE-2026-40097 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
2759 8.2 重要
Network 		Saltcorn Saltcorn Saltcornにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40163 2026-04-28 10:11 2026-04-10 Show GitHub Exploit DB Packet Storm
2760 6.1 警告
Network 		AdonisJS adonisjs/http-server
AdonisJS Core 		AdonisJSのAdonisJS Core等の複数製品におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-40255 2026-04-28 10:11 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
316361 - proftpd proftpd ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response. CWE-203
 Information Exposure Through Discrepancy 		CVE-2004-1602 2024-02-16 03:46 2004-10-15 Show GitHub Exploit DB Packet Storm
316362 - novell ichain Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force passwor… CWE-203
 Information Exposure Through Discrepancy 		CVE-2003-0637 2024-02-16 03:46 2003-08-27 Show GitHub Exploit DB Packet Storm
316363 - openbsd
openpkg
siemens 		openssh
openpkg
scalance_x204rna_ecc_firmware
scalance_x204rna_firmware 		OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a… CWE-203
 Information Exposure Through Discrepancy 		CVE-2003-0190 2024-02-16 03:46 2003-05-12 Show GitHub Exploit DB Packet Storm
316364 - adobe svg_viewer The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src prope… CWE-203
 Information Exposure Through Discrepancy 		CVE-2005-0918 2024-02-16 00:19 2005-05-5 Show GitHub Exploit DB Packet Storm
316365 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29640 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm
316366 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29639 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm
316367 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29638 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm
316368 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29637 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm
316369 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29636 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm
316370 - - - Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. - CVE-2021-29635 2024-02-15 15:15 2024-02-15 Show GitHub Exploit DB Packet Storm