Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3021 6.2 警告
Local
Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-35902 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3022 9.8 緊急
Network
Mercurycom MIPC252W Firmware MercurycomのMIPC252W Firmwareにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-35903 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3023 4.8 警告
Network
Apache Software Foundation Apache Storm Prometheus Reporter Apache Software FoundationのApache Storm Prometheus Reporterにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-40557 2026-05-7 10:53 2026-04-27 Show GitHub Exploit DB Packet Storm
3024 8.8 重要
Network
minerva minerva Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-5779 2026-05-7 10:53 2026-04-28 Show GitHub Exploit DB Packet Storm
3025 8.1 重要
Network
minerva minerva Agilonhealth (MphRx)のMinervaにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-5780 2026-05-7 10:52 2026-04-28 Show GitHub Exploit DB Packet Storm
3026 8.8 重要
Network
Frappe ERPNext FrappeのERPNextにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2023-54345 2026-05-7 10:52 2026-05-5 Show GitHub Exploit DB Packet Storm
3027 7.5 重要
Network
OpenEMR OpenEMR OpenEMRにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2023-54347 2026-05-7 10:52 2026-05-5 Show GitHub Exploit DB Packet Storm
3028 7.2 重要
Network
デル data domain operating system デルのdata domain operating systemにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2025-46607 2026-05-7 10:52 2026-04-17 Show GitHub Exploit DB Packet Storm
3029 6.6 警告
Network
デル data domain operating system デルのdata domain operating systemにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2025-46641 2026-05-7 10:52 2026-04-17 Show GitHub Exploit DB Packet Storm
3030 8.8 重要
Adjacent
Google Android GoogleのAndroidにおける認証アルゴリズムの不適切な実装に関する脆弱性 CWE-303
認証アルゴリズム上の問題
CVE-2026-0073 2026-05-7 10:52 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
317161 - openbsd openssh Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses during challenge response authentication when OpenBSD is usin… NVD-CWE-Other
CVE-2002-0640 2024-07-1 20:15 2002-07-3 Show GitHub Exploit DB Packet Storm
317162 - - - Rejected reason: CVE ID issued in error. This is not a valid vulnerability. - CVE-2024-5972 2024-06-29 04:15 2024-06-29 Show GitHub Exploit DB Packet Storm
317163 8.8 HIGH
Network
microsoft office
works_suite
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a m… CWE-120
Classic Buffer Overflow
CVE-2006-2492 2024-06-28 23:15 2006-05-20 Show GitHub Exploit DB Packet Storm
317164 - - - Rejected reason: This submission has been rejected by the CNA of record. Authentication is user configurable as described in our documentation.     https://enterprise.arcgis.com/en/server/latest/… - CVE-2024-37694 2024-06-28 05:15 2024-06-22 Show GitHub Exploit DB Packet Storm
317165 5.9 MEDIUM
Network
cisco ios Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port. NVD-CWE-noinfo
CVE-2004-1464 2024-06-28 04:22 2004-12-31 Show GitHub Exploit DB Packet Storm
317166 - linux
debian
linux_kernel
debian_linux
The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause … CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0298 2024-06-28 04:17 2010-02-13 Show GitHub Exploit DB Packet Storm
317167 - - - Rejected reason: This CVE is a duplicate of CVE-2024-38374. - CVE-2024-38515 2024-06-27 22:16 2024-06-27 Show GitHub Exploit DB Packet Storm
317168 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2024-6349 2024-06-27 00:15 2024-06-27 Show GitHub Exploit DB Packet Storm
317169 - - - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. - CVE-2024-36802 2024-06-26 15:15 2024-06-26 Show GitHub Exploit DB Packet Storm
317170 - - - Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-32111. - CVE-2024-6306 2024-06-26 02:15 2024-06-25 Show GitHub Exploit DB Packet Storm