Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
451 8.8 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-35463 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
452 5.3 警告
Network 		oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-35483 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
453 8.8 重要
Local 		NSA Emissary NSAのEmissaryにおける複数の脆弱性 New CWE-116
CWE-78
CVE-2026-35582 2026-04-27 10:49 2026-04-18 Show GitHub Exploit DB Packet Storm
454 6.5 警告
Network 		Vikunja Vikunja Vikunjaにおけるセッション期限に関する脆弱性 New CWE-613
不適切なセッション期限 		CVE-2026-35594 2026-04-27 10:48 2026-04-10 Show GitHub Exploit DB Packet Storm
455 5.3 警告
Network 		レッドハット build of keycloak レッドハットのbuild of keycloakにおける同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反 		CVE-2026-37977 2026-04-27 10:48 2026-04-6 Show GitHub Exploit DB Packet Storm
456 7.5 重要
Network 		Signal K Signal K Server Signal KのSignal K Serverにおける複数の脆弱性 New CWE-1333
CWE-400
CVE-2026-39320 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
457 5.4 警告
Network 		opensourcepos open source point of sale opensourceposのopen source point of saleにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-39380 2026-04-27 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
458 7.6 重要
Network 		FreeScout FreeScout FreeScoutにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-39384 2026-04-27 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
459 3.1 低
Network 		OpenBao OpenBao OpenBaoにおける証明書検証に関する脆弱性 New CWE-295
不正な証明書検証 		CVE-2026-39388 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
460 4.9 警告
Network 		OpenBao OpenBao OpenBaoにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2026-39946 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348721 - be beos Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL. NVD-CWE-Other
CVE-2000-1152 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348722 - network_associates sniffer_agent Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name. NVD-CWE-Other
CVE-2000-1157 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348723 - network_associates sniffer_agent NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords. NVD-CWE-Other
CVE-2000-1158 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348724 - network_associates sniffer_agent NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands. NVD-CWE-Other
CVE-2000-1159 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348725 - network_associates sniffer_agent NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests. NVD-CWE-Other
CVE-2000-1160 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348726 - adcycle adcycle The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete data… NVD-CWE-Other
CVE-2000-1161 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348727 - rob_flynn gaim Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag. NVD-CWE-Other
CVE-2000-1172 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348728 - microsys cyberpatrol Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sn… NVD-CWE-Other
CVE-2000-1173 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348729 - jan_hubicka koules Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument. NVD-CWE-Other
CVE-2000-1175 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm
348730 - yabb yabb Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field. NVD-CWE-Other
CVE-2000-1176 2008-09-6 05:22 2001-01-9 Show GitHub Exploit DB Packet Storm