Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2761 7.2 重要
Network 		Progress Software Corporation ECS Connection Manager
loadmaster
Connection Manager for ObjectScale 		Progress Software CorporationのConnection Manager for ObjectScale等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-4048 2026-05-7 12:05 2026-04-20 Show GitHub Exploit DB Packet Storm
2762 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40499 2026-05-7 12:05 2026-04-15 Show GitHub Exploit DB Packet Storm
2763 7.3 重要
Network 		Apache Software Foundation HttpClient Apache Software FoundationのHttpClientにおける認証の重要なステップの欠如に関する脆弱性 CWE-304
認証の重要なステップの欠如 		CVE-2026-40542 2026-05-7 12:05 2026-04-22 Show GitHub Exploit DB Packet Storm
2764 9.1 緊急
Network 		goshs goshs goshsにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-40903 2026-05-7 12:05 2026-04-21 Show GitHub Exploit DB Packet Storm
2765 8.2 重要
Network 		traefik traefik traefikにおける誤って解決された名前や参照の使用に関する脆弱性 CWE-706
誤って解決された名前や参照の使用 		CVE-2026-40912 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2766 5.9 警告
Network 		Apache Software Foundation Apache Airflow Apache Software FoundationのApache Airflowにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-41016 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2767 6.4 警告
Network 		traefik traefik traefikにおける複数の脆弱性 CWE-653
CWE-863
CVE-2026-41174 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2768 3.7 低
Network 		traefik traefik traefikにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-41263 2026-05-7 12:05 2026-04-30 Show GitHub Exploit DB Packet Storm
2769 8.1 重要
Network 		OpenClaw OpenClaw OpenClawにおける不変と仮定される Web パラメータの外部制御に関する脆弱性 CWE-472
不変と仮定される Web パラメータの外部制御 		CVE-2026-41353 2026-05-7 12:05 2026-04-23 Show GitHub Exploit DB Packet Storm
2770 5.3 警告
Network 		OpenClaw OpenClaw OpenClawにおける誤って解決された名前や参照の使用に関する脆弱性 CWE-706
誤って解決された名前や参照の使用 		CVE-2026-41354 2026-05-7 12:05 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318051 - sun
oracle 		jsse
java_web_start
jre 		X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 … CWE-295
Improper Certificate Validation  		CVE-2003-1229 2024-02-9 12:26 2003-12-31 Show GitHub Exploit DB Packet Storm
318052 - rtfm ssldump Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted SSLv2 challenge value. CWE-787
 Out-of-bounds Write 		CVE-2002-2227 2024-02-9 12:26 2002-12-31 Show GitHub Exploit DB Packet Storm
318053 - microsoft windows_xp
windows_2000
windows_98
windows_me
windows_98se
windows_nt
internet_explorer
office
outlook_express 		The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Ma… CWE-295
Improper Certificate Validation  		CVE-2002-0862 2024-02-9 12:26 2002-10-4 Show GitHub Exploit DB Packet Storm
318054 - cjguestbook_project cjguestbook Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a javascript URI in an img bbcode tag in the comments paramet… CWE-79
Cross-site Scripting 		CVE-2006-3211 2024-02-9 12:21 2006-06-24 Show GitHub Exploit DB Packet Storm
318055 - fantastic_guestbook_project fantastic_guestbook Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting 		CVE-2006-3568 2024-02-9 12:20 2006-07-13 Show GitHub Exploit DB Packet Storm
318056 - aol aim Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument. CWE-120
Classic Buffer Overflow 		CVE-2000-1094 2024-02-9 12:20 2001-01-9 Show GitHub Exploit DB Packet Storm
318057 - sendmail
netbsd
hp
windriver
sun
gentoo
oracle 		sendmail
netbsd
hp-ux
bsdos
sunos
linux
solaris
alphaserver_sc
platform_sa 		Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the … CWE-120
Classic Buffer Overflow 		CVE-2002-1337 2024-02-9 12:19 2003-03-7 Show GitHub Exploit DB Packet Storm
318058 - bsdi
sun
hp
oracle
debian
ibm
freebsd
netbsd
digital
next 		bsd_os
sunos
hp-ux
solaris
debian_linux
aix
freebsd
netbsd
ultrix
nextstep 		Buffer overflow of rlogin program using TERM environmental variable. CWE-120
Classic Buffer Overflow 		CVE-1999-0046 2024-02-9 12:19 1997-02-6 Show GitHub Exploit DB Packet Storm
318059 - terascript wintango_application_server Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference. CWE-120
Classic Buffer Overflow 		CVE-2003-0595 2024-02-9 12:18 2003-08-27 Show GitHub Exploit DB Packet Storm
318060 9.8 CRITICAL
Network 		anybus ipc\@chip_firmware Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password gu… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2001-1339 2024-02-9 12:15 2001-05-24 Show GitHub Exploit DB Packet Storm