Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2791 7.5 重要
Network 		Gardyn Gardin API GardynのGardin APIにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32646 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
2792 5.3 警告
Network 		Gardyn Gardin API GardynのGardin APIにおけるアクティブ状態のデバッグコードに関する脆弱性 CWE-489
間違ったセッションへのデータの漏洩 		CVE-2026-32662 2026-04-24 11:36 2026-04-3 Show GitHub Exploit DB Packet Storm
2793 9.1 緊急
Network 		Apache Software Foundation Apache Kafka Apache Software FoundationのApache Kafkaにおける入力で指定されたインデックス、位置、またはオフセットの不適切な検証に関する脆弱性 CWE-1285
入力で指定されたインデックス、位置、またはオフセットの不適切な検証 		CVE-2026-33557 2026-04-24 11:36 2026-04-20 Show GitHub Exploit DB Packet Storm
2794 5.3 警告
Network 		Apache Software Foundation Apache Kafka Apache Software FoundationのApache Kafkaにおけるサーバログファイルからの情報漏えいに関する脆弱性 CWE-533
サーバログファイルからの情報漏えい 		CVE-2026-33558 2026-04-24 11:35 2026-04-20 Show GitHub Exploit DB Packet Storm
2795 8.8 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-34186 2026-04-24 11:35 2026-04-13 Show GitHub Exploit DB Packet Storm
2796 7.2 重要
Network 		Artica ST Pandora FMS Artica STのPandora FMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34188 2026-04-24 11:35 2026-04-13 Show GitHub Exploit DB Packet Storm
2797 9.8 緊急
Network 		Vinyl Cache
Varnish Software		 varnish enterprise
Vinyl Cache 		Varnish Software等の複数ベンダの製品における動作順序 (正規化前の検証) に関する脆弱性 CWE-180
不適切な動作順序 (正規化前の検証) 		CVE-2026-34475 2026-04-24 11:35 2026-03-27 Show GitHub Exploit DB Packet Storm
2798 9.8 緊急
Network 		GNU Project GNU C Library GNU ProjectのGNU C Libraryにおける複数の脆弱性 CWE-122
CWE-787
CVE-2026-5450 2026-04-24 11:35 2026-04-20 Show GitHub Exploit DB Packet Storm
2799 7.2 重要
Network 		LibreNMS LibreNMS LibreNMSにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-6204 2026-04-24 11:35 2026-04-13 Show GitHub Exploit DB Packet Storm
2800 10 緊急
Network 		ATRODO (Jon Gentle) Net::Dropbear ATRODO (Jon Gentle)のNet::Dropbearにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2016-6129
CVE-2018-12437
CVE-2025-15638 		2026-04-24 11:35 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315101 9.8 CRITICAL
Network 		redshift atphttpd Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. CWE-193
 Off-by-one Error 		CVE-2002-1816 2024-02-16 06:28 2002-12-31 Show GitHub Exploit DB Packet Storm
315102 7.5 HIGH
Network 		sendmail sendmail Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced… CWE-416
 Use After Free 		CVE-2006-4434 2024-02-16 06:20 2006-08-29 Show GitHub Exploit DB Packet Storm
315103 - microsoft windows_2000
windows_xp
windows_98
windows_nt
windows_server_2003 		A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads t… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2003-0813 2024-02-16 06:19 2003-11-17 Show GitHub Exploit DB Packet Storm
315104 9.8 CRITICAL
Network 		ultimate_php_board_project ultimate_php_board register.php in Ultimate PHP Board (UPB) 1.0 and 1.0b uses an administrative account Admin with a capital "A," but allows a remote attacker to impersonate the administrator by registering an account … CWE-178
 Improper Handling of Case Sensitivity 		CVE-2002-1820 2024-02-16 06:19 2002-12-31 Show GitHub Exploit DB Packet Storm
315105 - openpkg
trustix
hp
avaya
debian
php 		openpkg
secure_linux
hp-ux
converged_communications_server
debian_linux
php 		The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2004-0594 2024-02-16 06:17 2004-07-27 Show GitHub Exploit DB Packet Storm
315106 7.5 HIGH
Network 		pldaniels altermime Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte. CWE-193
 Off-by-one Error 		CVE-2002-1721 2024-02-16 06:13 2002-12-31 Show GitHub Exploit DB Packet Storm
315107 7.5 HIGH
Network 		hadrons xfstt Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the se… CWE-193
 Off-by-one Error 		CVE-2003-0625 2024-02-16 06:12 2003-08-27 Show GitHub Exploit DB Packet Storm
315108 - tcpdump tcpdump Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length t… CWE-125
CWE-191
Out-of-bounds Read
 Integer Underflow (Wrap or Wraparound) 		CVE-2004-0184 2024-02-16 06:09 2004-05-4 Show GitHub Exploit DB Packet Storm
315109 - openbsd openbsd isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-… CWE-125
Out-of-bounds Read 		CVE-2004-0221 2024-02-16 06:09 2004-05-4 Show GitHub Exploit DB Packet Storm
315110 8.8 HIGH
Network 		phpbb phpbb prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) … CWE-665
 Improper Initialization 		CVE-2001-1471 2024-02-16 06:06 2001-07-31 Show GitHub Exploit DB Packet Storm