Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
441 6.5 警告
Network 		オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおける複数の脆弱性 New CWE-285
CWE-601
CVE-2026-34315 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
442 7.5 重要
Network 		Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおける複数の脆弱性 New CWE-117
CWE-684
CVE-2026-34478 2026-04-27 10:49 2026-04-10 Show GitHub Exploit DB Packet Storm
443 7.5 重要
Network 		Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 New CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-34480 2026-04-27 10:49 2026-04-10 Show GitHub Exploit DB Packet Storm
444 7.5 重要
Network 		Apache Software Foundation Apache Log4j Apache Software FoundationのApache Log4jにおけるエンコードおよびエスケープに関する脆弱性 New CWE-116
不適切なエンコード、または出力のエスケープ 		CVE-2026-34481 2026-04-27 10:49 2026-04-10 Show GitHub Exploit DB Packet Storm
445 7.5 重要
Network 		Christian Neukirchen Rack Rackにおける複数の脆弱性 New CWE-400
CWE-407
CWE-770
CVE-2026-34827 2026-04-27 10:49 2026-04-2 Show GitHub Exploit DB Packet Storm
446 6.5 警告
Network 		Glances project Glances Nicolas Hennion (nicolargo)のGlancesにおける複数の脆弱性 New CWE-200
CWE-306
CWE-306
CWE-942
CVE-2026-34839 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
447 5.7 警告
Network 		オラクル PeopleSoft Enterprise CS Student Records オラクルのPeopleSoft Enterprise CS Student Recordsにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-35241 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
448 7.8 重要
Local 		オラクル Oracle Application Development Framework (Oracle ADF) オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-35243 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
449 7.5 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35405 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
450 8.2 重要
Network 		libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35457 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348521 - cgiscript.net csmailto CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field. NVD-CWE-Other
CVE-2002-0749 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348522 - cgiscript.net csmailto CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field. NVD-CWE-Other
CVE-2002-0750 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348523 - cgiscript.net csmailto CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters. NVD-CWE-Other
CVE-2002-0751 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348524 - cgiscript.net csmailto CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing t… NVD-CWE-Other
CVE-2002-0752 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348525 - talentsoft web\+_server Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie. NVD-CWE-Other
CVE-2002-0753 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348526 - freebsd
kth 		heimdal
freebsd 		Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges a… NVD-CWE-Other
CVE-2002-0754 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348527 - freebsd freebsd Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute comman… NVD-CWE-Other
CVE-2002-0755 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348528 - usermin
webmin 		usermin
webmin 		Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies. NVD-CWE-Other
CVE-2002-0756 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348529 - usermin
webmin 		usermin
webmin 		(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authen… NVD-CWE-Other
CVE-2002-0757 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
348530 - bzip bzip2 bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the u… NVD-CWE-Other
CVE-2002-0759 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm