Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5061	9.8	緊急 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-42221	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5062	9.8	緊急 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける複数の脆弱性	CWE-284 CWE-306	CVE-2026-42222	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5063	6.5	警告 Network	nginxui	Nginx UI	Nginx UI TeamのNginx UIにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-42223	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5064	7.5	重要 Network	n8n	n8n	n8nにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42226	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5065	6.5	警告 Network	n8n	n8n	n8nにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-42227	2026-05-8 12:23	2026-05-4	Show	GitHub Exploit DB Packet Storm

5066	6.5	警告 Network	n8n	n8n	n8nにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42228	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5067	8.8	重要 Network	n8n	n8n	n8nにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-42229	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5068	6.1	警告 Network	n8n	n8n	n8nにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-42230	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5069	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42231	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

5070	8.8	重要 Network	n8n	n8n	n8nにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42232	2026-05-8 12:22	2026-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356611	-	bea	weblogic_server	Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by…	NVD-CWE-Other	CVE-2003-1224	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

356612	-	bea	weblogic_server	The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.	NVD-CWE-Other	CVE-2003-1225	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

356613	-	bea	weblogic_server	BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to…	NVD-CWE-Other	CVE-2003-1226	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

356614	-	cisco	80-7111-01_for_the_unity-svrx255-1a 80-7112-01_for_the_unity-svrx255-2a	Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bu…	NVD-CWE-Other	CVE-2003-0983	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

356615	-	cisco	catalyst_6500 catalyst_6500_ws-svc-nam-1 catalyst_6500_ws-svc-nam-2 catalyst_6500_ws-x6380-nam catalyst_7600_ws-svc-nam-1 catalyst_7600_ws-svc-nam-2 catalyst_7600_ws-x6380-nam fi…	Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth reque…	NVD-CWE-Other	CVE-2003-1001	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

356616	-	cisco	catalyst_6500 catalyst_6500_ws-svc-nam-1 catalyst_6500_ws-svc-nam-2 catalyst_6500_ws-x6380-nam catalyst_7600_ws-svc-nam-1 catalyst_7600_ws-svc-nam-2 catalyst_7600_ws-x6380-nam fi…	Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is …	NVD-CWE-Other	CVE-2003-1002	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

356617	-	apple	mac_os_x mac_os_x_server	The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.	NVD-CWE-Other	CVE-2003-1005	2008-09-11 04:21	2003-12-31	Show	GitHub Exploit DB Packet Storm

356618	-	linux	linux_kernel	Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).	NVD-CWE-Other	CVE-2003-0643	2008-09-11 04:20	2003-07-25	Show	GitHub Exploit DB Packet Storm

356619	-	trend_micro	damage_cleanup_server housecall	Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings.	NVD-CWE-Other	CVE-2003-0646	2008-09-11 04:20	2003-08-27	Show	GitHub Exploit DB Packet Storm

356620	-	cisco	ios	Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.	NVD-CWE-Other	CVE-2003-0647	2008-09-11 04:20	2003-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed