Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4451 7.5 重要
Network
Delta Electronics, INC. AS320T Firmware Delta Electronics, INC.のAS320T Firmwareにおける非公開の機能に関する脆弱性 CWE-912
非公開の機能
CVE-2026-1952 2026-05-13 10:27 2026-04-24 Show GitHub Exploit DB Packet Storm
4452 9.1 緊急
Network
DDEV DDEV DDEVにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-32885 2026-05-13 10:27 2026-04-22 Show GitHub Exploit DB Packet Storm
4453 6.5 警告
Network
langflow Langflow Desktop langflowのLangflow Desktopにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-3340 2026-05-13 10:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4454 6.5 警告
Network
langflow Langflow Desktop langflowのLangflow Desktopにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-3345 2026-05-13 10:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4455 6.4 警告
Network
langflow Langflow Desktop langflowのLangflow DesktopにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-3346 2026-05-13 10:27 2026-04-30 Show GitHub Exploit DB Packet Storm
4456 4.8 警告
Network
V2Board V2Board V2Boardにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-37503 2026-05-13 10:26 2026-05-1 Show GitHub Exploit DB Packet Storm
4457 7.5 重要
Network
V2Board V2Board V2BoardにおけるGET リクエストにおけるクエリ文字列からの情報漏えいに関する脆弱性 CWE-598
GET リクエストにおけるクエリ文字列からの情報漏えい
CVE-2026-37504 2026-05-13 10:26 2026-05-1 Show GitHub Exploit DB Packet Storm
4458 4.9 警告
Network
V2Board V2Board V2BoardにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-37505 2026-05-13 10:26 2026-05-1 Show GitHub Exploit DB Packet Storm
4459 5.4 警告
Network
Apache Software Foundation Apache-airflow-providers-keycloak Apache Software FoundationのApache-airflow-providers-keycloakにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-40948 2026-05-13 10:26 2026-04-18 Show GitHub Exploit DB Packet Storm
4460 6.5 警告
Adjacent
ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-41286 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346751 - apache
suse
http_server
suse_linux
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method. NVD-CWE-Other
CVE-2000-0869 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346752 - khamil_landross_and_zack_jones eftp Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string. NVD-CWE-Other
CVE-2000-0870 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346753 - khamil_landross_and_zack_jones eftp Buffer overflow in EFTP allows remote attackers to cause a denial of service by sending a string that does not contain a newline, then disconnecting from the server. NVD-CWE-Other
CVE-2000-0871 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346754 - ibm aix netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network interface statistics and possibly hide evidence of unusual network activities. NVD-CWE-Other
CVE-2000-0873 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346755 - qualcomm eudora Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF). NVD-CWE-Other
CVE-2000-0874 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346756 - texas_imperial_software wftpd
wftpd_pro
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters. NVD-CWE-Other
CVE-2000-0875 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346757 - texas_imperial_software wftpd
wftpd_pro
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname. CWE-200
Information Exposure
CVE-2000-0876 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346758 - ranson_johnson mailform mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker. NVD-CWE-Other
CVE-2000-0877 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346759 - ranson_johnson mailto_cgi_script The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field. NVD-CWE-Other
CVE-2000-0878 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm
346760 - mandrakesoft mandrake_linux The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directory to be browseable, which allows remote attackers to list the contents of that … NVD-CWE-Other
CVE-2000-0883 2017-10-10 10:29 2000-11-14 Show GitHub Exploit DB Packet Storm