Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3641 7.4 重要
Network 		OpenProject OpenProject OpenProjectにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-33667 2026-04-30 11:03 2026-04-15 Show GitHub Exploit DB Packet Storm
3642 6.7 警告
Local 		デル data domain operating system デルのdata domain operating systemにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-35154 2026-04-30 11:03 2026-04-20 Show GitHub Exploit DB Packet Storm
3643 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-35379 2026-04-30 11:03 2026-04-22 Show GitHub Exploit DB Packet Storm
3644 5.5 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-35380 2026-04-30 11:03 2026-04-22 Show GitHub Exploit DB Packet Storm
3645 10 緊急
Network 		マイクロソフト Microsoft Entra ID Microsoft Entra ID Entitlement Management Spoofing Vulnerability CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35431 2026-04-30 11:03 2026-04-23 Show GitHub Exploit DB Packet Storm
3646 5.3 警告
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35484 2026-04-30 11:03 2026-04-7 Show GitHub Exploit DB Packet Storm
3647 7.5 重要
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35485 2026-04-30 11:03 2026-04-7 Show GitHub Exploit DB Packet Storm
3648 8.8 重要
Network 		Pi-hole FTLDNS Pi-holeのFTLDNSにおける複数の脆弱性 CWE-78
CWE-93
CVE-2026-35517 2026-04-30 11:03 2026-04-7 Show GitHub Exploit DB Packet Storm
3649 8.8 重要
Network 		Pi-hole FTLDNS Pi-holeのFTLDNSにおける複数の脆弱性 CWE-78
CWE-93
CVE-2026-35518 2026-04-30 11:03 2026-04-7 Show GitHub Exploit DB Packet Storm
3650 8.8 重要
Network 		Pi-hole FTLDNS Pi-holeのFTLDNSにおける複数の脆弱性 CWE-78
CWE-93
CVE-2026-35519 2026-04-30 11:03 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352501 - wireless_tools wireless_tools Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable. NVD-CWE-Other
CVE-2003-0948 2008-09-6 05:35 2003-12-15 Show GitHub Exploit DB Packet Storm
352502 - ibm aix Buffer overflow in rcp for AIX 4.3.3, 5.1 and 5.2 allows local users to gain privileges. NVD-CWE-Other
CVE-2003-0954 2008-09-6 05:35 2003-12-31 Show GitHub Exploit DB Packet Storm
352503 - sun sun_fire The Network Management Port on Sun Fire B1600 systems allows remote attackers to cause a denial of service (packet loss) via ARP packets, which cause all ports to become temporarily disabled. NVD-CWE-Other
CVE-2003-0970 2008-09-6 05:35 2003-12-15 Show GitHub Exploit DB Packet Storm
352504 - - - Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (… NVD-CWE-Other
CVE-2003-1031 2008-09-6 05:35 2004-02-17 Show GitHub Exploit DB Packet Storm
352505 - mod_access_referer mod_access_referer mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header that is missing a hostname, as parsed by the ap_parse_uri_components function in A… NVD-CWE-Other
CVE-2003-1054 2008-09-6 05:35 2003-04-16 Show GitHub Exploit DB Packet Storm
352506 - fourelle_venturi_wireless venturi_client Venturi Client before 2.2, as used in certain Fourelle and Venturi Wireless products, can be used as an open proxy for various protocols, including an open relay for SMTP, which allows it to be abuse… NVD-CWE-Other
CVE-2003-0316 2008-09-6 05:34 2003-06-16 Show GitHub Exploit DB Packet Storm
352507 - colten_edwards bitchx Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash). NVD-CWE-Other
CVE-2003-0322 2008-09-6 05:34 2003-06-9 Show GitHub Exploit DB Packet Storm
352508 - epic epic4 EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP reques… NVD-CWE-Other
CVE-2003-0328 2008-09-6 05:34 2003-06-9 Show GitHub Exploit DB Packet Storm
352509 - demarc_security puresecure Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, which allows attackers to steal login names and passwords to gain privileges. NVD-CWE-Other
CVE-2003-0340 2008-09-6 05:34 2003-05-21 Show GitHub Exploit DB Packet Storm
352510 - apple
kde 		safari
konqueror_embedded 		Safari 1.0 Beta 2 (v73) and earlier does not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates. NVD-CWE-Other
CVE-2003-0355 2008-09-6 05:34 2003-06-9 Show GitHub Exploit DB Packet Storm