Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4241 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31506 2026-04-30 12:15 2026-04-22 Show GitHub Exploit DB Packet Storm
4242 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける二重解放に関する脆弱性 CWE-415
二重解放
CVE-2026-31507 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
4243 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-31508 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
4244 8.8 重要
Network
BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-23780 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
4245 9.8 緊急
Network
BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用
CVE-2026-23781 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
4246 7.5 重要
Network
BMC Software Control-M Managed File Transfer BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-23782 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
4247 9.9 緊急
Network
Doorman Doorman Doormanにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理
CVE-2026-30269 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
4248 7.5 重要
Network
PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server
PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-33257 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
4249 7.5 重要
Network
PowerDNS PowerDNS Recursor
dnsdist
PowerDNS Authoritative Server
PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-33260 2026-04-30 12:14 2026-04-22 Show GitHub Exploit DB Packet Storm
4250 8.8 重要
Network
litellm litellm LiteLLMにおける保護されていない代替チャネルに関する脆弱性 CWE-420
保護されていない代替チャネル
CVE-2026-40217 2026-04-30 12:14 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353521 - xoops xoops Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Messa… NVD-CWE-Other
CVE-2002-0217 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353522 - sas sas_base
sas_integration_technologies
Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a … NVD-CWE-Other
CVE-2002-0218 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353523 - sas sas_base
sas_integration_technologies
Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument. NVD-CWE-Other
CVE-2002-0219 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353524 - phpsmssend phpsmssend phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters. NVD-CWE-Other
CVE-2002-0220 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353525 - etype eserv Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from ac… NVD-CWE-Other
CVE-2002-0221 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353526 - etype eserv Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command. NVD-CWE-Other
CVE-2002-0222 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353527 - infopop
wired_community_software
ultimate_bulletin_board
wwwthreads
Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends i… NVD-CWE-Other
CVE-2002-0223 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353528 - microsoft msn_messenger Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more wh… NVD-CWE-Other
CVE-2002-0228 2008-09-11 09:00 2002-05-16 Show GitHub Exploit DB Packet Storm
353529 - caldera unixware Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message cat… NVD-CWE-Other
CVE-2002-0246 2008-09-11 09:00 2002-05-29 Show GitHub Exploit DB Packet Storm
353530 - wliang wmtv Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges. NVD-CWE-Other
CVE-2002-0247 2008-09-11 09:00 2002-05-29 Show GitHub Exploit DB Packet Storm