Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5761 9.8 緊急
Network 		Frappe ERPNext FrappeのERPNextにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-38431 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
5762 6.1 警告
Network 		Frappe ERPNext FrappeのERPNextにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-38432 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
5763 9.1 緊急
Network 		CHORNY Apache::Session CHORNYのApache::Sessionにおける有効期限後または解放後のリソースの操作に関する脆弱性 CWE-672
有効期限後または解放後のリソースの操作 		CVE-2013-10075 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
5764 9.8 緊急
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおける複数の脆弱性 CWE-502
CWE-918
CVE-2026-34084 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
5765 5.4 警告
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35453 2026-05-11 11:12 2026-05-5 Show GitHub Exploit DB Packet Storm
5766 9.1 緊急
Network 		Zcash Foundation Zebra-script
Zebrad 		Zcash FoundationのZebra-script等の複数製品における呼び出し元による仕様の不適切な準拠に関する脆弱性 CWE-573
呼び出し元による仕様の不適切な準拠 		CVE-2026-41583 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
5767 6.5 警告
Network 		Zcash Foundation zebra-rpc
Zebrad 		Zcash Foundationのzebra-rpc等の複数製品における複数の脆弱性 CWE-248
CWE-617
CVE-2026-41585 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
5768 9.1 緊急
Network 		Zcash Foundation Zebra-script
Zebrad 		Zcash FoundationのZebra-script等の複数製品におけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-44497 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
5769 5.3 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける複数の脆弱性 CWE-367
CWE-770
CVE-2025-69233 2026-05-11 11:12 2026-05-8 Show GitHub Exploit DB Packet Storm
5770 8.4 重要
Local 		デル data domain operating system
PowerProtect DP Series Appliance 		デルのdata domain operating system等の複数製品における弱い認証情報の使用に関する脆弱性 CWE-1391
脆弱な認証情報の使用 		CVE-2026-23853 2026-05-11 11:12 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
359171 - ibm aix The AIX Fast Response Cache Accelerator (FRCA) allows local users to modify arbitrary files via the configuration capability in the frcactrl program. NVD-CWE-Other
CVE-2000-0249 2008-09-11 04:03 2000-04-26 Show GitHub Exploit DB Packet Storm
359172 - qnx qnx The crypt function in QNX uses weak encryption, which allows local users to decrypt passwords. NVD-CWE-Other
CVE-2000-0250 2008-09-11 04:03 2000-04-14 Show GitHub Exploit DB Packet Storm
359173 - hp hp-ux
vvos 		HP-UX 11.04 VirtualVault (VVOS) sends data to unprivileged processes via an interface that has multiple aliased IP addresses. NVD-CWE-Other
CVE-2000-0251 2008-09-11 04:03 2000-04-6 Show GitHub Exploit DB Packet Storm
359174 - nbase-xyplex edgeblaster The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CGI program. NVD-CWE-Other
CVE-2000-0255 2008-09-11 04:03 2000-04-5 Show GitHub Exploit DB Packet Storm
359175 - redhat linux The X font server xfs in Red Hat Linux 6.x allows an attacker to cause a denial of service via a malformed request. NVD-CWE-Other
CVE-2000-0263 2008-09-11 04:03 2000-04-16 Show GitHub Exploit DB Packet Storm
359176 - cisco catos Cisco Catalyst 5.4.x allows a user to gain access to the "enable" mode without a password. NVD-CWE-Other
CVE-2000-0267 2008-09-11 04:03 2000-04-20 Show GitHub Exploit DB Packet Storm
359177 - cisco ios
accesspath
as5200
as5300
as5800
system_controller_3640
voice_gateway_as5800
3660_router
7100_router
7200_router
7500_router
ubr7200 		Cisco IOS 11.x and 12.x allows remote attackers to cause a denial of service by sending the ENVIRON option to the Telnet daemon before it is ready to accept it, which causes the system to reboot. NVD-CWE-Other
CVE-2000-0268 2008-09-11 04:03 2000-04-20 Show GitHub Exploit DB Packet Storm
359178 - symantec pcanywhere PCAnywhere allows remote attackers to cause a denial of service by terminating the connection before PCAnywhere provides a login prompt. NVD-CWE-Other
CVE-2000-0273 2008-09-11 04:03 2000-04-9 Show GitHub Exploit DB Packet Storm
359179 - cryptocard cryptoadmin CRYPTOCard CryptoAdmin for PalmOS uses weak encryption to store a user's PIN number, which allows an attacker with access to the .PDB file to generate valid PT-1 tokens after cracking the PIN. NVD-CWE-Other
CVE-2000-0275 2008-09-11 04:03 2000-04-10 Show GitHub Exploit DB Packet Storm
359180 - saleslogix corporation_eviewer The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll administration program, which does not authenticate the user. NVD-CWE-Other
CVE-2000-0278 2008-09-11 04:03 2000-08-3 Show GitHub Exploit DB Packet Storm