Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3571 8.1 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-44574 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3572 7.5 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-44575 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3573 5.9 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-44577 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
3574 10 緊急
Network
Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション
CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3575 7.7 重要
Network
Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3576 5.5 警告
Local
jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3577 4.2 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-44991 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3578 5 警告
Local
OpenClaw OpenClaw OpenClawにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-44992 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3579 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける不完全なブラックリストに関する脆弱性 CWE-184
不完全なブラックリスト
CVE-2026-44993 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
3580 5.3 警告
Network
OpenClaw OpenClaw OpenClawにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-44994 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346121 - international_telecommunications international_telecommunications_webbbs Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request. NVD-CWE-Other
CVE-2000-0561 2017-10-10 10:29 2000-06-19 Show GitHub Exploit DB Packet Storm
346122 - mindstorm smartftp_daemon SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0565 2017-10-10 10:29 2000-06-13 Show GitHub Exploit DB Packet Storm
346123 - sybergen sygate Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. NVD-CWE-Other
CVE-2000-0569 2017-10-10 10:29 2000-06-30 Show GitHub Exploit DB Packet Storm
346124 - centrinity firstclass_intranet_server FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an email with a long To: mail header. NVD-CWE-Other
CVE-2000-0570 2017-10-10 10:29 2000-06-27 Show GitHub Exploit DB Packet Storm
346125 - ssh ssh SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff … NVD-CWE-Other
CVE-2000-0575 2017-10-10 10:29 2000-07-5 Show GitHub Exploit DB Packet Storm
346126 - cgi-world poll_it Poll It 2.0 CGI script allows remote attackers to read arbitrary files by specifying the file name in the data_dir parameter. NVD-CWE-Other
CVE-2000-0590 2017-10-10 10:29 2000-07-4 Show GitHub Exploit DB Packet Storm
346127 - caldera
freebsd
mandrakesoft
openlinux_desktop
openlinux_ebuilder
openlinux_edesktop
openlinux_eserver
freebsd
mandrake_linux
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting ch… NVD-CWE-Other
CVE-2000-0594 2017-10-10 10:29 2000-07-4 Show GitHub Exploit DB Packet Storm
346128 - netscape
novell
enterprise_server
netware
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. NVD-CWE-Other
CVE-2000-0600 2017-10-10 10:29 2000-06-26 Show GitHub Exploit DB Packet Storm
346129 - netwin cwmail
dmailweb
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return. NVD-CWE-Other
CVE-2000-0610 2017-10-10 10:29 2000-06-23 Show GitHub Exploit DB Packet Storm
346130 - netwin cwmail
dmailweb
The default configuration of NetWin dMailWeb and cwMail trusts all POP servers, which allows attackers to bypass normal authentication and cause a denial of service. NVD-CWE-Other
CVE-2000-0611 2017-10-10 10:29 2000-06-23 Show GitHub Exploit DB Packet Storm