Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
501 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-26942 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
502 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-26943 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
503 6.7 警告
Local 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-26951 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
504 8.8 重要
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-27172 2026-04-30 12:16 2026-04-27 Show GitHub Exploit DB Packet Storm
505 7.8 重要
Local 		ggml.ai llama.cpp ggml.aiのllama.cppにおける複数の脆弱性 New CWE-122
CWE-190
CVE-2026-27940 2026-04-30 12:16 2026-03-12 Show GitHub Exploit DB Packet Storm
506 9.8 緊急
Network 		OpenPLC Project OpenPLC_v3 ファームウェア OpenPLC ProjectのOpenPLC_v3 ファームウェアにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-28205 2026-04-30 12:16 2026-04-9 Show GitHub Exploit DB Packet Storm
507 4.3 警告
Network 		Rocket.Chat Rocket.Chat Rocket.Chatにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-29197 2026-04-30 12:16 2026-04-24 Show GitHub Exploit DB Packet Storm
508 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC18 ファームウェアにおけるコマンドインジェクションの脆弱性 New CWE-77
CWE-77
CVE-2026-31255 2026-04-30 12:16 2026-04-27 Show GitHub Exploit DB Packet Storm
509 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-31481 2026-04-30 12:16 2026-04-22 Show GitHub Exploit DB Packet Storm
510 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-31482 2026-04-30 12:16 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313651 7.5 HIGH
Network 		grandstream bt-100_firmware Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spo… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2005-2182 2024-02-9 05:45 2005-07-11 Show GitHub Exploit DB Packet Storm
313652 9.8 CRITICAL
Network 		sgi irix The LDAP name service (nsd) in IRIX 6.5.19 and earlier does not properly verify if the USERPASSWORD attribute has been provided by an LDAP server, which could allow attackers to log in without a pass… CWE-346
 Origin Validation Error 		CVE-2003-0174 2024-02-9 05:45 2003-05-12 Show GitHub Exploit DB Packet Storm
313653 6.5 MEDIUM
Network 		ubbcentral ubb.threads Multiple cross-site request forgery (CSRF) vulnerabilities in (1) addaddress.php, (2) toggleignore.php, (3) removeignore.php, and (4) removeaddress.php in Infopop UBB.Threads before 6.5.2 Beta allow … CWE-352
 Origin Validation Error 		CVE-2005-2059 2024-02-9 05:44 2005-06-29 Show GitHub Exploit DB Packet Storm
313654 4.3 MEDIUM
Network 		invisioncommunity gallery Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the (1) albums or (2) del… CWE-352
 Origin Validation Error 		CVE-2005-1947 2024-02-9 05:44 2005-06-9 Show GitHub Exploit DB Packet Storm
313655 9.8 CRITICAL
Network 		bea weblogic_server BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without ha… CWE-459
 Incomplete Cleanup 		CVE-2005-1744 2024-02-9 05:35 2005-05-24 Show GitHub Exploit DB Packet Storm
313656 7.5 HIGH
Network 		accessdata secureclean SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be … CWE-459
 Incomplete Cleanup 		CVE-2002-2070 2024-02-9 05:35 2002-12-31 Show GitHub Exploit DB Packet Storm
313657 7.5 HIGH
Network 		microsoft windows_nt Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing … CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-1999-1127 2024-02-9 05:35 1999-12-31 Show GitHub Exploit DB Packet Storm
313658 7.5 HIGH
Network 		tolvanen eraser Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2068 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
313659 7.5 HIGH
Network 		pgp personal_privacy PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted. CWE-459
 Incomplete Cleanup 		CVE-2002-2069 2024-02-9 05:33 2002-12-31 Show GitHub Exploit DB Packet Storm
313660 7.5 HIGH
Network 		east-tec eraser East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be del… CWE-459
 Incomplete Cleanup 		CVE-2002-2067 2024-02-9 05:28 2002-12-31 Show GitHub Exploit DB Packet Storm