Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
841 5.3 警告
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-41606 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
842 6.5 警告
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-41607 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
843 7.5 重要
Network
Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-41636 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
844 7.5 重要
Network
Marked project Marked Marked projectのMarkedにおける複数の脆弱性 CWE-400
CWE-674
CWE-835
CVE-2026-41680 2026-04-30 10:59 2026-04-24 Show GitHub Exploit DB Packet Storm
845 9.8 緊急
Network
Apache Software Foundation Apache Pony Mail Apache Software FoundationのApache Pony MailにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2026-41873 2026-04-30 10:59 2026-04-28 Show GitHub Exploit DB Packet Storm
846 6.5 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41908 2026-04-30 10:58 2026-04-23 Show GitHub Exploit DB Packet Storm
847 5.4 警告
Network
OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-41909 2026-04-30 10:58 2026-04-23 Show GitHub Exploit DB Packet Storm
848 8.8 重要
Network
GitHub Enterprise Server GitHubのEnterprise Serverにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現
CVE-2026-4296 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
849 8.8 重要
Network
Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-4342 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
850 6.5 警告
Network
レッドハット
libarchive
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Red Hat Hardened Images
libarchive
libarchive等の複数ベンダの製品における整数への不適切なビットシフトに関する脆弱性 CWE-1335
整数への不適切なビットシフト
CVE-2026-4426 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347381 - - - IBM DB2 Universal Database (UDB) 810 before version 8 FixPak 10 allows remote authenticated users to cause a denial of service (db2jd service crash) by "connecting from a downlevel client." NVD-CWE-Other
CVE-2005-4740 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347382 - netbsd netbsd NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attaching a debugger to a setuid/setgid (P_SUGID) process that performs an exec without… NVD-CWE-Other
CVE-2005-4741 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347383 - pavel_kankovsky echelog Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with unknown impact and attack vectors. NVD-CWE-Other
CVE-2005-4742 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347384 - vwar virtual_war PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to include and execute arbitrary PHP code via unspecified attack vectors. NOTE: t… NVD-CWE-Other
CVE-2005-4748 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347385 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote attackers to cause a denial of service (server thread hang) via unknown attack … NVD-CWE-Other
CVE-2005-4750 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347386 - bea weblogic_server The vendor has released multiple advisories, as well as fixes to address these issues. NVD-CWE-Other
CVE-2005-4750 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347387 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn the administrative user about platform differences in URLResource case sensitiv… NVD-CWE-Other
CVE-2005-4759 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347388 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java command line at server startup, which might include sensitive information (pass… NVD-CWE-Other
CVE-2005-4761 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347389 - bea weblogic_server An attacker must have read access to the server log to see the sensitive values. NVD-CWE-Other
CVE-2005-4761 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm
347390 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes stores the boot password in the registry in cleartext, which might allow local use… NVD-CWE-Other
CVE-2005-4762 2008-09-6 05:57 2005-12-31 Show GitHub Exploit DB Packet Storm