Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3371	9.1	緊急 Network	CyberPanel	CyberPanel	CyberPanelにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41473	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3372	8.2	重要 Local	レッドハット	Red Hat Advanced Cluster Management for Kubernetes	レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-4740	2026-04-30 12:08	2026-04-7	Show	GitHub Exploit DB Packet Storm

3373	9.8	緊急 Network	Pipecat	Pipecat	Pipecatにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-62373	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

3374	7.8	重要 Local	Amazon.com, Inc.	Kiro IDE	Amazon.com, Inc.のKiro IDEにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-0830	2026-04-30 12:08	2026-01-9	Show	GitHub Exploit DB Packet Storm

3375	5.4	警告 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-25720	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3376	9.8	緊急 Network	huggingface	LeRobot	huggingfaceのLeRobotにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-25874	2026-04-30 12:08	2026-04-23	Show	GitHub Exploit DB Packet Storm

3377	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-27841	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3378	9.1	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-27843	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3379	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-33524	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

3380	7.5	重要 Network	Navigation Data Standard (NDS)	Zserio	Navigation Data Standard (NDS)のZserioにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-33666	2026-04-30 12:08	2026-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350481	-	ultrascripts	ultraboard	UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, which causes UltraBoard to fork copies of itself.	NVD-CWE-Other	CVE-2000-0426	2008-09-11 04:04	2000-05-5	Show	GitHub Exploit DB Packet Storm

350482	-	aladdin_knowledge_systems	etoken	The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without knowing the PIN of the owner by resetting the PIN in the EEPROM.	NVD-CWE-Other	CVE-2000-0427	2008-09-11 04:04	2000-05-4	Show	GitHub Exploit DB Packet Storm

350483	-	trend_micro	interscan_viruswall	Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.	NVD-CWE-Other	CVE-2000-0428	2008-09-11 04:04	2000-05-4	Show	GitHub Exploit DB Packet Storm

350484	-	matt_kruse	calendar_script	The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0432	2008-09-11 04:04	2000-05-16	Show	GitHub Exploit DB Packet Storm

350485	-	suse	suse_linux	The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such…	NVD-CWE-Other	CVE-2000-0433	2008-09-11 04:04	2000-05-2	Show	GitHub Exploit DB Packet Storm

350486	-	matthew_redman	allmanage	The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.	NVD-CWE-Other	CVE-2000-0434	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

350487	-	matthew_redman	allmanage	The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.	NVD-CWE-Other	CVE-2000-0435	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

350488	-	metaproducts	offline_explorer	MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0436	2008-09-11 04:04	2000-05-19	Show	GitHub Exploit DB Packet Storm

350489	-	network_associates	gauntlet_firewall webshield webshield_e-ppliance	Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.	NVD-CWE-Other	CVE-2000-0437	2008-09-11 04:04	2000-05-18	Show	GitHub Exploit DB Packet Storm

350490	-	caldera slackware suse turbolinux	openlinux slackware_linux suse_linux turbolinux	Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.	NVD-CWE-Other	CVE-2000-0438	2008-09-11 04:04	2000-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed