Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3371	6.1	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-20059	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

3372	4.7	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-20060	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

3373	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-20061	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

3374	6.5	警告 Local	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア	シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-20064	2026-04-30 12:17	2026-03-4	Show	GitHub Exploit DB Packet Storm

3375	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20078	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

3376	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20081	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

3377	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22761	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

3378	9.1	緊急 Network	GNOME Project	libsoup	GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-2369	2026-04-30 12:17	2026-03-19	Show	GitHub Exploit DB Packet Storm

3379	9.6	緊急 Network	マイクロソフト	Microsoft Partner Center	Microsoft パートナーセンターの特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24303	2026-04-30 12:17	2026-04-23	Show	GitHub Exploit DB Packet Storm

3380	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24504	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
353761	-	cisco	ios	Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.	NVD-CWE-Other	CVE-2001-0288	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353762	-	joseph_allen	joe	Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc fi…	NVD-CWE-Other	CVE-2001-0289	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353763	-	gnu	mailman	Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.	NVD-CWE-Other	CVE-2001-0290	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353764	-	francisco_burzi	php-nuke	PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.	NVD-CWE-Other	CVE-2001-0292	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353765	-	datawizard	ftpxq	Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.	NVD-CWE-Other	CVE-2001-0293	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353766	-	typsoft	typsoft_ftp_server	Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command.	NVD-CWE-Other	CVE-2001-0294	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353767	-	texas_imperial_software	wftpd_pro	Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.	NVD-CWE-Other	CVE-2001-0296	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353768	-	dattaraj_rao	simple_server	Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.	NVD-CWE-Other	CVE-2001-0297	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353769	-	sapio_design_ltd	webreflex	Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.	NVD-CWE-Other	CVE-2001-0298	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

353770	-	pi3	pi3web	Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.	NVD-CWE-Other	CVE-2001-0302	2008-09-6 05:23	2001-05-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed