Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3051	7.8	重要 Local	マイクロソフト	Microsoft Office Online Server Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft Office Microsoft Excel	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32199	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

3052	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Office Long Term Servicing Channel (LTSC) Microsoft PowerPoint Microsoft Office	Microsoft PowerPoint のリモートでコードが実行される脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-32200	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

3053	7.8	重要 Local	デル	Alienware Command Center	デルのAlienware Command Centerにおける最小権限の違反に関する脆弱性	CWE-272 最小権限の違反	CVE-2026-32655	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

3054	2.7	低 Network	GitHub	Enterprise Server	GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-3307	2026-04-30 11:03	2026-04-21	Show	GitHub Exploit DB Packet Storm

3055	5.5	警告 Local	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 の(オンプレミス) で、情報漏えいの脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-33103	2026-04-30 11:03	2026-04-14	Show	GitHub Exploit DB Packet Storm

3056	10	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-33453	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

3057	9.4	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-33454	2026-04-30 11:03	2026-04-27	Show	GitHub Exploit DB Packet Storm

3058	7.5	重要 Network	Linaro	OP-TEE Trusted OS	LinaroのOP-TEE Trusted OSにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33662	2026-04-30 11:03	2026-04-24	Show	GitHub Exploit DB Packet Storm

3059	7.4	重要 Network	OpenProject	OpenProject	OpenProjectにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-33667	2026-04-30 11:03	2026-04-15	Show	GitHub Exploit DB Packet Storm

3060	6.7	警告 Local	デル	data domain operating system	デルのdata domain operating systemにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-35154	2026-04-30 11:03	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352331	-	sgi	freeware irix	fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.	NVD-CWE-Other	CVE-2002-1517	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352332	-	sgi	irix	mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.	NVD-CWE-Other	CVE-2002-1518	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352333	-	rapidstream watchguard	rapidstream firebox	Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arb…	NVD-CWE-Other	CVE-2002-1519	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352334	-	rapidstream watchguard	rapidstream firebox	The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows …	NVD-CWE-Other	CVE-2002-1520	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352335	-	mdg_computer_services	web_server_4d	Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.	NVD-CWE-Other	CVE-2002-1521	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352336	-	cooolsoft	powerftp	Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.	NVD-CWE-Other	CVE-2002-1522	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352337	-	daniel_arenz	mini_server	Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.	NVD-CWE-Other	CVE-2002-1523	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352338	-	nullsoft	winamp	Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.	NVD-CWE-Other	CVE-2002-1524	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352339	-	astaware sun	searchdisc sunone_starter_kit	Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or …	NVD-CWE-Other	CVE-2002-1525	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

352340	-	emumail	emu_webmail	Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.	NVD-CWE-Other	CVE-2002-1526	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed