Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3971	7.5	重要 Network	Angeet	ES3 KVM Firmware	AngeetのES3 KVM Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-32297	2026-04-30 12:13	2026-03-17	Show	GitHub Exploit DB Packet Storm

3972	9.1	緊急 Network	Angeet	ES3 KVM Firmware	AngeetのES3 KVM FirmwareにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-32298	2026-04-30 12:13	2026-03-17	Show	GitHub Exploit DB Packet Storm

3973	7.5	重要 Network	オラクル	Oracle Financial Services Customer Screening	オラクルのOracle Financial Services Customer Screeningにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-34320	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

3974	5.8	警告 Network	Pavel Zbornik (pavelzbornik)	whisperX REST API	Pavel Zbornik (pavelzbornik)のwhisperX REST APIにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-34981	2026-04-30 12:13	2026-04-6	Show	GitHub Exploit DB Packet Storm

3975	7.5	重要 Network	Distribution	Distribution	Distributionにおけるアクセス制御に関する脆弱性	CWE-284 CWE-noinfo	CVE-2026-35172	2026-04-30 12:13	2026-04-6	Show	GitHub Exploit DB Packet Storm

3976	7.5	重要 Network	UnJS Team	defu	UnJS Teamのdefuにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-35209	2026-04-30 12:13	2026-04-6	Show	GitHub Exploit DB Packet Storm

3977	7.5	重要 Network	オラクル	Oracle Financial Services Transaction Filtering	オラクルのOracle Financial Services Transaction Filteringにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-35231	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

3978	6.3	警告 Local	Flatpak	XDG Desktop Portal (xdg-desktop-portal)	FlatpakのXDG Desktop Portal (xdg-desktop-portal)におけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-40354	2026-04-30 12:13	2026-04-11	Show	GitHub Exploit DB Packet Storm

3979	5.3	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40448	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

3980	6.6	警告 Local	Veeam	one	サムスンのOneにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40449	2026-04-30 12:13	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349081	-	kth	kth_kerberos	The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to…	NVD-CWE-Other	CVE-2001-1444	2017-07-11 10:29	2001-08-27	Show	GitHub Exploit DB Packet Storm

349082	-	lotus	domino_mail_server	Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands.	NVD-CWE-Other	CVE-2001-1445	2017-07-11 10:29	2001-03-1	Show	GitHub Exploit DB Packet Storm

349083	-	lotus	domino_mail_server	Upgrade to R5.0.8 to resolve the problem.	NVD-CWE-Other	CVE-2001-1445	2017-07-11 10:29	2001-03-1	Show	GitHub Exploit DB Packet Storm

349084	-	apple	mac_os_x	Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible d…	NVD-CWE-Other	CVE-2001-1446	2017-07-11 10:29	2001-09-11	Show	GitHub Exploit DB Packet Storm

349085	-	apple	mac_os_x	It is reported that this issue is addressed in the Apple Mac OS X and Mac OS X Server release versions 10.2 and above. This is not confirmed.	NVD-CWE-Other	CVE-2001-1446	2017-07-11 10:29	2001-09-11	Show	GitHub Exploit DB Packet Storm

349086	-	apple	mac_os_x	NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications …	NVD-CWE-Other	CVE-2001-1447	2017-07-11 10:29	2001-10-17	Show	GitHub Exploit DB Packet Storm

349087	-	magic	edeveloper	Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc,…	NVD-CWE-Other	CVE-2001-1448	2017-07-11 10:29	2001-12-17	Show	GitHub Exploit DB Packet Storm

349088	-	apache mandrakesoft	http_server mandrake_single_network_firewall mandrake_linux mandrake_linux_corporate_server	The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.	NVD-CWE-Other	CVE-2001-1449	2017-07-11 10:29	2001-11-28	Show	GitHub Exploit DB Packet Storm

349089	-	netegrity	siteminder	Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.	NVD-CWE-Other	CVE-2001-1455	2017-07-11 10:29	2001-08-24	Show	GitHub Exploit DB Packet Storm

349090	-	mcafee network_associates pgp sgi	webshield_smtp gauntlet_firewall e-ppliance_300 irix mcafee_e-ppliance	Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2001-1456	2017-07-11 10:29	2001-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed