Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3621 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23756 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3622 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23757 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3623 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23758 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3624 6.5 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-25773 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
3625 4.3 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-28736 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
3626 7.8 重要
Local 		DeepCool DeepCreative DeepCoolのDeepCreativeにおける安全でない継承されたパーミッションに関する脆弱性 CWE-277
安全でない継承されたパーミッション 		CVE-2026-30266 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
3627 7.5 重要
Network 		Angeet ES3 KVM Firmware AngeetのES3 KVM Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32297 2026-04-30 12:13 2026-03-17 Show GitHub Exploit DB Packet Storm
3628 9.1 緊急
Network 		Angeet ES3 KVM Firmware AngeetのES3 KVM FirmwareにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-32298 2026-04-30 12:13 2026-03-17 Show GitHub Exploit DB Packet Storm
3629 7.5 重要
Network 		オラクル Oracle Financial Services Customer Screening オラクルのOracle Financial Services Customer Screeningにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-34320 2026-04-30 12:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3630 5.8 警告
Network 		Pavel Zbornik (pavelzbornik) whisperX REST API Pavel Zbornik (pavelzbornik)のwhisperX REST APIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34981 2026-04-30 12:13 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350781 - suse suse_linux The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such… NVD-CWE-Other
CVE-2000-0433 2008-09-11 04:04 2000-05-2 Show GitHub Exploit DB Packet Storm
350782 - matthew_redman allmanage The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers. NVD-CWE-Other
CVE-2000-0434 2008-09-11 04:04 2000-05-13 Show GitHub Exploit DB Packet Storm
350783 - matthew_redman allmanage The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages. NVD-CWE-Other
CVE-2000-0435 2008-09-11 04:04 2000-05-13 Show GitHub Exploit DB Packet Storm
350784 - metaproducts offline_explorer MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0436 2008-09-11 04:04 2000-05-19 Show GitHub Exploit DB Packet Storm
350785 - network_associates gauntlet_firewall
webshield
webshield_e-ppliance 		Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands. NVD-CWE-Other
CVE-2000-0437 2008-09-11 04:04 2000-05-18 Show GitHub Exploit DB Packet Storm
350786 - caldera
slackware
suse
turbolinux 		openlinux
slackware_linux
suse_linux
turbolinux 		Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. NVD-CWE-Other
CVE-2000-0438 2008-09-11 04:04 2000-05-22 Show GitHub Exploit DB Packet Storm
350787 - freebsd
netbsd 		freebsd
netbsd 		NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option. NVD-CWE-Other
CVE-2000-0440 2008-09-11 04:04 2000-05-1 Show GitHub Exploit DB Packet Storm
350788 - ibm aix Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems. NVD-CWE-Other
CVE-2000-0441 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
350789 - qualcomm
sun 		qpopper
cobalt_raq_2
cobalt_raq_3i 		Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. NVD-CWE-Other
CVE-2000-0442 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm
350790 - hp jetadmin The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0443 2008-09-11 04:04 2000-05-24 Show GitHub Exploit DB Packet Storm