Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
471 5.4 警告
Network 		wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
472 7.6 重要
Network 		wger wger wger Projectのwgerにおける複数の脆弱性 New CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
473 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 New CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
474 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 New CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
475 7.1 重要
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける不正な認証に関する脆弱性 New CWE-863
不正な認証 		CVE-2026-40599 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
476 4.4 警告
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける保護メカニズムの不具合に関する脆弱性 New CWE-693
保護メカニズムの不具合 		CVE-2026-40604 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
477 4.8 警告
Network 		mitmproxy mitmproxy mitmproxyにおけるLDAP インジェクションの脆弱性 New CWE-90
LDAP インジェクション 		CVE-2026-40606 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
478 7.5 重要
Network 		coturn project coturn coturn projectのcoturnにおける不正な型変換に関する脆弱性 New CWE-704
不正な型変換またはキャスト 		CVE-2026-40613 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
479 8.8 重要
Network 		goshs goshs goshsにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-40876 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
480 7.5 重要
Network 		- NestJSにおける再帰制御に関する脆弱性 New CWE-674
不適切な再帰制御 		CVE-2026-40879 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348571 - trend_micro interscan_viruswall Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands. NVD-CWE-Other
CVE-2001-0432 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
348572 - netopia timbuktu_mac Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. NVD-CWE-Other
CVE-2001-0438 2008-09-6 05:24 2001-07-2 Show GitHub Exploit DB Packet Storm
348573 - david_harris mercury_nlm Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command. NVD-CWE-Other
CVE-2001-0442 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
348574 - software602 602pro_lan_suite Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characte… NVD-CWE-Other
CVE-2001-0447 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
348575 - software602 602pro_lan_suite Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS dev… NVD-CWE-Other
CVE-2001-0448 2008-09-6 05:24 2001-06-18 Show GitHub Exploit DB Packet Storm
348576 - brs webweaver BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command. NVD-CWE-Other
CVE-2001-0452 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
348577 - brs webweaver Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories. NVD-CWE-Other
CVE-2001-0453 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
348578 - ssh ssh SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attac… NVD-CWE-Other
CVE-2001-0471 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
348579 - webcalendar webcalendar Vulnerability in WebCalendar 0.9.26 allows remote command execution. NVD-CWE-Other
CVE-2001-0477 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm
348580 - phpmyadmin phpmyadmin Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. NVD-CWE-Other
CVE-2001-0478 2008-09-6 05:24 2001-06-27 Show GitHub Exploit DB Packet Storm