Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2841 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6752 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2842 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6753 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2843 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6754 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2844 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-6755 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2845 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-6756 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2846 6.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2026-6757 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2847 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6758 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
2848 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6759 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
2849 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6760 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
2850 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-6761 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348431 - sas sas_base
sas_integration_technologies 		Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a … NVD-CWE-Other
CVE-2002-0218 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348432 - sas sas_base
sas_integration_technologies 		Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument. NVD-CWE-Other
CVE-2002-0219 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348433 - phpsmssend phpsmssend phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters. NVD-CWE-Other
CVE-2002-0220 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348434 - etype eserv Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from ac… NVD-CWE-Other
CVE-2002-0221 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348435 - etype eserv Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. NVD-CWE-Other
CVE-2002-0222 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348436 - infopop
wired_community_software 		ultimate_bulletin_board
wwwthreads 		Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends i… NVD-CWE-Other
CVE-2002-0223 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348437 - microsoft msn_messenger Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more wh… NVD-CWE-Other
CVE-2002-0228 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
348438 - caldera unixware Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message cat… NVD-CWE-Other
CVE-2002-0246 2008-09-11 09:00 2002-05-29 Show GitHub Exploit DB Packet Storm
348439 - wliang wmtv Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges. NVD-CWE-Other
CVE-2002-0247 2008-09-11 09:00 2002-05-29 Show GitHub Exploit DB Packet Storm
348440 - wliang wmtv wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file. NVD-CWE-Other
CVE-2002-0248 2008-09-11 09:00 2002-05-29 Show GitHub Exploit DB Packet Storm