Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
641 5.3 警告
Network 		hono hono honoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-44457 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
642 4.3 警告
Network 		hono hono honoにおける複数の脆弱性 CWE-116
CWE-74
CVE-2026-44458 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
643 3.8 低
Network 		hono hono honoにおける入力で指定された数量の不適切な検証に関する脆弱性 CWE-1284
入力で指定された数量の不適切な検証 		CVE-2026-44459 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
644 7.5 重要
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-44573 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
645 8.1 重要
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-44574 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
646 7.5 重要
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-44575 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
647 5.9 警告
Network 		Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-44577 2026-05-15 10:57 2026-05-13 Show GitHub Exploit DB Packet Storm
648 10 緊急
Network 		Peerigon angular-expressions Peerigonのangular-expressionsにおけるEval インジェクションに関する脆弱性 CWE-95
Evalインジェクション 		CVE-2026-44643 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
649 7.7 重要
Network 		Grav CMS grav Grav CMSのgravにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44738 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
650 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-44777 2026-05-15 10:57 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352581 - cisco call_manager Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) vi… NVD-CWE-Other
CVE-2002-0505 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352582 - redhat linux Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt. NVD-CWE-Other
CVE-2002-0506 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352583 - wwwisis wwwisis wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog. NVD-CWE-Other
CVE-2002-0508 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352584 - oracle oracle9i Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. NVD-CWE-Other
CVE-2002-0509 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352585 - linux linux_kernel The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… NVD-CWE-Other
CVE-2002-0510 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352586 - nscd nscd The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou… NVD-CWE-Other
CVE-2002-0511 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352587 - caldera openlinux_server
openlinux_workstation 		startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of oth… NVD-CWE-Other
CVE-2002-0512 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352588 - squirrelmail squirrelmail SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie. NVD-CWE-Other
CVE-2002-0516 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352589 - caldera unixware
openunix 		Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to progra… NVD-CWE-Other
CVE-2002-0517 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
352590 - freebsd freebsd The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using synco… NVD-CWE-Other
CVE-2002-0518 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm