Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
501 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-26942 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
502 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-26943 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
503 6.7 警告
Local 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー 		CVE-2026-26951 2026-04-30 12:16 2026-04-20 Show GitHub Exploit DB Packet Storm
504 8.8 重要
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-27172 2026-04-30 12:16 2026-04-27 Show GitHub Exploit DB Packet Storm
505 7.8 重要
Local 		ggml.ai llama.cpp ggml.aiのllama.cppにおける複数の脆弱性 New CWE-122
CWE-190
CVE-2026-27940 2026-04-30 12:16 2026-03-12 Show GitHub Exploit DB Packet Storm
506 9.8 緊急
Network 		OpenPLC Project OpenPLC_v3 ファームウェア OpenPLC ProjectのOpenPLC_v3 ファームウェアにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性 New CWE-1188
リソースの安全ではないデフォルト値への初期化 		CVE-2026-28205 2026-04-30 12:16 2026-04-9 Show GitHub Exploit DB Packet Storm
507 4.3 警告
Network 		Rocket.Chat Rocket.Chat Rocket.Chatにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-29197 2026-04-30 12:16 2026-04-24 Show GitHub Exploit DB Packet Storm
508 9.8 緊急
Network 		Shenzhen Tenda Technology Co.,Ltd. AC18 ファームウェア Shenzhen Tenda Technology Co.,Ltd.のAC18 ファームウェアにおけるコマンドインジェクションの脆弱性 New CWE-77
CWE-77
CVE-2026-31255 2026-04-30 12:16 2026-04-27 Show GitHub Exploit DB Packet Storm
509 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 New CWE-476
NULL ポインタデリファレンス 		CVE-2026-31481 2026-04-30 12:16 2026-04-22 Show GitHub Exploit DB Packet Storm
510 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足 		CVE-2026-31482 2026-04-30 12:16 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313711 - postgresql
trustix
mandrakesoft
redhat 		postgresql
secure_linux
mandrake_linux_corporate_server
enterprise_linux_desktop
enterprise_linux
mandrake_linux 		The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0977 2024-02-3 01:33 2005-02-9 Show GitHub Exploit DB Packet Storm
313712 9.8 CRITICAL
Network 		mit
openpkg
debian 		kerberos_5
openpkg
debian_linux 		Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code. CWE-415
 Double Free 		CVE-2004-0772 2024-02-3 00:27 2004-10-20 Show GitHub Exploit DB Packet Storm
313713 - mit
debian
redhat 		kerberos_5
debian_linux
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server 		Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow… CWE-415
 Double Free 		CVE-2004-0642 2024-02-3 00:27 2004-09-28 Show GitHub Exploit DB Packet Storm
313714 9.8 CRITICAL
Network 		mit
apple
debian 		kerberos_5
mac_os_x_server
mac_os_x
debian_linux 		Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. CWE-415
 Double Free 		CVE-2005-1689 2024-02-3 00:24 2005-07-18 Show GitHub Exploit DB Packet Storm
313715 7.8 HIGH
Local 		microsoft outlook
internet_explorer
windows_xp
windows_server_2003
windows_98
windows_me
windows_98se
windows_nt 		Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image. CWE-415
 Double Free 		CVE-2003-1048 2024-02-3 00:23 2004-07-27 Show GitHub Exploit DB Packet Storm
313716 9.8 CRITICAL
Network 		openssl openssl Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a certain invalid ASN.1 … CWE-415
 Double Free 		CVE-2003-0545 2024-02-3 00:23 2003-11-17 Show GitHub Exploit DB Packet Storm
313717 7.5 HIGH
Network 		gnome gtk Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. CWE-415
 Double Free 		CVE-2005-0891 2024-02-3 00:22 2005-05-2 Show GitHub Exploit DB Packet Storm
313718 9.8 CRITICAL
Network 		zlib zlib The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow … CWE-415
 Double Free 		CVE-2002-0059 2024-02-3 00:16 2002-03-15 Show GitHub Exploit DB Packet Storm
313719 - linux linux_kernel Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2005-3119 2024-02-3 00:13 2005-10-12 Show GitHub Exploit DB Packet Storm
313720 - mit
redhat
mandrakesoft 		kerberos_ftp_client
linux
mandrake_linux
mandrake_multi_network_firewall 		Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client. CWE-78
OS Command  		CVE-2003-0041 2024-02-3 00:13 2003-02-19 Show GitHub Exploit DB Packet Storm