Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2811 5.3 警告
Network
HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2025-31981 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
2812 6.1 警告
Network
WSO2 WSO2 API Manager
WSO2 Identity Server
WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-6024 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
2813 6.5 警告
Network
フォーティネット FortiOS
FortiPAM
FortiProxy
FortiSwitch Manager
フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2025-61624 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
2814 5.4 警告
Network
フォーティネット FortiSandbox
FortiSandbox Cloud
フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2025-61886 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
2815 5.3 警告
Network
Apache Software Foundation Apache Doris-MCP-Server Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2025-66335 2026-04-24 11:34 2026-04-20 Show GitHub Exploit DB Packet Storm
2816 6.5 警告
Network
フォーティネット FortiManager Cloud
FortiAnalyzer
FortiAnalyzer Cloud
FortiManager
フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2025-68649 2026-04-24 11:34 2026-04-14 Show GitHub Exploit DB Packet Storm
2817 8.4 重要
Local
Nitro Software Inc. Nitro PDF Pro Nitro Software Inc.のNitro PDF Proにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2025-69627 2026-04-24 11:34 2026-04-13 Show GitHub Exploit DB Packet Storm
2818 4.3 警告
Network
Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-0971 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
2819 5.4 警告
Network
Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性 CWE-74
インジェクション
CVE-2026-0972 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
2820 6.5 警告
Network
Fortra GoAnywhere Managed File Transfer FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性 CWE-74
インジェクション
CVE-2026-1089 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348901 - metaproducts offline_explorer MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0436 2008-09-11 04:04 2000-05-19 Show GitHub Exploit DB Packet Storm
348902 - network_associates gauntlet_firewall
webshield
webshield_e-ppliance
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. NVD-CWE-Other
CVE-2000-0437 2008-09-11 04:04 2000-05-18 Show GitHub Exploit DB Packet Storm
348903 - caldera
slackware
suse
turbolinux
openlinux
slackware_linux
suse_linux
turbolinux
Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. NVD-CWE-Other
CVE-2000-0438 2008-09-11 04:04 2000-05-22 Show GitHub Exploit DB Packet Storm
348904 - freebsd
netbsd
freebsd
netbsd
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. NVD-CWE-Other
CVE-2000-0440 2008-09-11 04:04 2000-05-1 Show GitHub Exploit DB Packet Storm
348905 - ibm aix Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. NVD-CWE-Other
CVE-2000-0441 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
348906 - qualcomm
sun
qpopper
cobalt_raq_2
cobalt_raq_3i
Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. NVD-CWE-Other
CVE-2000-0442 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
348907 - hp jetadmin The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0443 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
348908 - hp jetadmin HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000. NVD-CWE-Other
CVE-2000-0444 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
348909 - pgp pgp The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys. NVD-CWE-Other
CVE-2000-0445 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
348910 - marty_bochane mdbms Buffer overflow in MDBMS database server allows remote attackers to execute arbitrary commands via a long string. NVD-CWE-Other
CVE-2000-0446 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm