Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4191 6.5 警告
Local 		シスコシステムズ Cisco Firepower Threat Defense ソフトウェア シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-20064 2026-04-30 12:17 2026-03-4 Show GitHub Exploit DB Packet Storm
4192 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-20078 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
4193 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-20081 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
4194 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-22761 2026-04-30 12:17 2026-04-20 Show GitHub Exploit DB Packet Storm
4195 9.1 緊急
Network 		GNOME Project libsoup GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-2369 2026-04-30 12:17 2026-03-19 Show GitHub Exploit DB Packet Storm
4196 9.6 緊急
Network 		マイクロソフト Microsoft Partner Center Microsoft パートナー センターの特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-24303 2026-04-30 12:17 2026-04-23 Show GitHub Exploit DB Packet Storm
4197 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-24504 2026-04-30 12:17 2026-04-20 Show GitHub Exploit DB Packet Storm
4198 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-24505 2026-04-30 12:17 2026-04-20 Show GitHub Exploit DB Packet Storm
4199 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-24506 2026-04-30 12:17 2026-04-20 Show GitHub Exploit DB Packet Storm
4200 8.8 重要
Network 		it-novum GmbH openITCOCKPIT it-novum GmbHのopenITCOCKPITにおける複数の脆弱性 CWE-20
CWE-78
CWE-78
CVE-2026-24893 2026-04-30 12:16 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
355591 - hp hp-ux VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2002-2363 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355592 - sourceforge php_ticket Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket. CWE-79
Cross-site Scripting 		CVE-2002-2364 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355593 - springer_verlag_berlin_heidelberg simple_wais Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character. CWE-20
 Improper Input Validation  		CVE-2002-2365 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355594 - cerulean_studios trillian Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors fil… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-2366 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355595 - socks5 socks5 Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname. CWE-189
CWE-119
Numeric Errors
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-2367 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355596 - nec socks_5 Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function i… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-2368 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355597 - perception liteserve Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL. CWE-200
Information Exposure 		CVE-2002-2369 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355598 - sws sws_simple_web_server SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline. NVD-CWE-Other
CVE-2002-2370 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355599 - linksys wet11 Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header. CWE-20
 Improper Input Validation  		CVE-2002-2371 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
355600 - ibm infoprint_21 The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-2372 2008-09-6 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm