Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4451	5.6	警告 Local	Home Assistant Ecosystem	Home Assistant Command-line Interface (hass-cli)	Home Assistant EcosystemのHome Assistant Command-line Interface (hass-cli)における複数の脆弱性	CWE-1336 CWE-94	CVE-2026-40602	2026-04-30 12:13	2026-04-21	Show	GitHub Exploit DB Packet Storm

4452	5.5	警告 Local	Dayuan Jiang (DayuanJiang)	Next AI Draw.io	Dayuan Jiang (DayuanJiang)のNext AI Draw.ioにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40608	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4453	8.1	重要 Network	Zcash Foundation	Zebra-consensus Zebrad	Zcash FoundationのZebra-consensus等の複数製品における誤った要素を使用した比較に関する脆弱性	CWE-1025 誤った要素を使用した比較	CVE-2026-40880	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4454	7.5	重要 Network	Zcash Foundation	zebra-network Zebrad	Zcash Foundationのzebra-network等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-40881	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4455	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40888	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4456	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40889	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4457	8.8	重要 Network	Jos de Jong	math.js	Math.jsにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-40897	2026-04-30 12:12	2026-04-24	Show	GitHub Exploit DB Packet Storm

4458	8.8	重要 Network	Paperclip	paperclipai	PaperclipのpaperclipaiにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-41208	2026-04-30 12:12	2026-04-23	Show	GitHub Exploit DB Packet Storm

4459	6.5	警告 Network	Frappe	Frappe HR	FrappeのFrappe HRにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-41320	2026-04-30 12:12	2026-04-21	Show	GitHub Exploit DB Packet Storm

4460	7.5	重要 Network	chargepoint	Home Flex CPH50 Firmware	ChargePoint, Inc.のHome Flex CPH50 Firmwareにおける重要な情報を含むソースコードに関する脆弱性	CWE-540 機密情報を含むソースコード	CVE-2026-4155	2026-04-30 12:12	2026-04-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354721	-	cat_soft	serv-u	The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.	NVD-CWE-Other	CVE-2000-0176	2008-09-11 04:03	2000-02-29	Show	GitHub Exploit DB Packet Storm

354722	-	dnstools_software	dnstools	DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0177	2008-09-11 04:03	2000-03-2	Show	GitHub Exploit DB Packet Storm

354723	-	foundrynet	serveriron	ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions.	NVD-CWE-Other	CVE-2000-0178	2008-09-11 04:03	2000-02-28	Show	GitHub Exploit DB Packet Storm

354724	-	hp	openview_omniback_ii	HP OpenView OmniBack 2.55 allows remote attackers to cause a denial of service via a large number of connections to port 5555.	NVD-CWE-Other	CVE-2000-0179	2008-09-11 04:03	2000-02-28	Show	GitHub Exploit DB Packet Storm

354725	-	checkpoint	firewall-1	Firewall-1 3.0 and 4.0 leaks packets with private IP address information, which could allow remote attackers to determine the real IP address of the host that is making the connection.	NVD-CWE-Other	CVE-2000-0181	2008-09-11 04:03	2000-03-11	Show	GitHub Exploit DB Packet Storm

354726	-	michael_sandrof	ircii	Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability.	NVD-CWE-Other	CVE-2000-0183	2008-09-11 04:03	2000-03-10	Show	GitHub Exploit DB Packet Storm

354727	-	mandrakesoft redhat	mandrake_linux linux	Linux printtool sets the permissions of printer configuration files to be world-readable, which allows local attackers to obtain printer share passwords.	NVD-CWE-Other	CVE-2000-0184	2008-09-11 04:03	2000-03-9	Show	GitHub Exploit DB Packet Storm

354728	-	realnetworks	realserver realserver_g2	RealMedia RealServer reveals the real IP address of a Real Server, even if the address is supposed to be private.	NVD-CWE-Other	CVE-2000-0185	2008-09-11 04:03	2000-03-8	Show	GitHub Exploit DB Packet Storm

354729	-	freebsd mandrakesoft redhat turbolinux	freebsd mandrake_linux linux turbolinux	Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.	NVD-CWE-Other	CVE-2000-0186	2008-09-11 04:03	2000-02-28	Show	GitHub Exploit DB Packet Storm

354730	-	alex_heiphetz_group	ezshopper	EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0187	2008-09-11 04:03	2000-02-27	Show	GitHub Exploit DB Packet Storm