Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3581 6.5 警告
Adjacent 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア
Adaptive Security Appliance (ASA) Software 		シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における範囲外のポインタオフセットの使用に関する脆弱性 CWE-823
範囲外のポインタオフセットの使用 		CVE-2026-20022 2026-05-7 11:28 2026-03-4 Show GitHub Exploit DB Packet Storm
3582 6.5 警告
Adjacent 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア
Adaptive Security Appliance (ASA) Software 		シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-20023 2026-05-7 11:28 2026-03-4 Show GitHub Exploit DB Packet Storm
3583 5.7 警告
Adjacent 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア
Adaptive Security Appliance (ASA) Software 		シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-20024 2026-05-7 11:28 2026-03-4 Show GitHub Exploit DB Packet Storm
3584 8.6 重要
Network 		シスコシステムズ Adaptive Security Appliance (ASA) Software シスコシステムズのAdaptive Security Appliance (ASA) Softwareにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性 CWE-772
有効なライフタイム後のリソースの解放の欠如 		CVE-2026-20082 2026-05-7 11:28 2026-03-4 Show GitHub Exploit DB Packet Storm
3585 5 警告
Network 		Cloud Foundry, Inc. routing release
cf-deployment 		Cloud Foundry, Inc.のCf-deployment等の複数製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性 CWE-923
意図するエンドポイントとの通信チャネルの不適切な制限 		CVE-2026-22726 2026-05-7 11:28 2026-05-1 Show GitHub Exploit DB Packet Storm
3586 6.5 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22740 2026-05-7 11:28 2026-04-29 Show GitHub Exploit DB Packet Storm
3587 3.1 低
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-22741 2026-05-7 11:28 2026-04-29 Show GitHub Exploit DB Packet Storm
3588 5.3 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-22745 2026-05-7 11:28 2026-04-29 Show GitHub Exploit DB Packet Storm
3589 8.8 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける二重解放に関する脆弱性 CWE-415
二重解放 		CVE-2026-23918 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
3590 8.8 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-24072 2026-05-7 11:28 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346881 - belkin f5d7230-4
f5d7232-4 		Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface, allow remote attackers to access the ma… NVD-CWE-Other
CVE-2005-3802 2017-07-12 10:29 2005-11-24 Show GitHub Exploit DB Packet Storm
346882 - dotclear dotclear SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dc_xd parameter in a cookie. NVD-CWE-Other
CVE-2005-3963 2017-07-12 10:29 2005-12-2 Show GitHub Exploit DB Packet Storm
346883 - ibm net.data Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly… NVD-CWE-Other
CVE-2004-1442 2017-07-12 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346884 - zonelabs imsecure Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions. NVD-CWE-Other
CVE-2004-1517 2017-07-12 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346885 - leafnode leafnode fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers. NVD-CWE-Other
CVE-2004-2068 2017-07-12 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346886 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the s… NVD-CWE-Other
CVE-2004-2424 2017-07-12 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
346887 - microsoft frontpage The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name inclu… NVD-CWE-Other
CVE-2000-0710 2017-07-12 10:29 2000-10-20 Show GitHub Exploit DB Packet Storm
346888 - biblioscape biblioweb_server Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request. NVD-CWE-Other
CVE-2001-0226 2017-07-12 10:29 2001-05-3 Show GitHub Exploit DB Packet Storm
346889 - network_solutions rwhoisd Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command. NVD-CWE-Other
CVE-2001-0838 2017-07-12 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
346890 - phprojekt phprojekt The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files. NVD-CWE-Other
CVE-2002-1759 2017-07-12 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm