Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
941 3.1
Network
Weblate Weblate Weblateにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-33212 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
942 4.3 警告
Network
Weblate Weblate Weblateにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-33214 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
943 6.8 警告
Network
Weblate Weblate Weblateにおける複数の脆弱性 CWE-200
CWE-22
CVE-2026-33220 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
944 8 重要
Network
Weblate Weblate Weblateにおける複数の脆弱性 CWE-23
CWE-434
CWE-94
CVE-2026-33435 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
945 5 警告
Network
Weblate Weblate Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-33440 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
946 4.3 警告
Network
Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-33460 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
947 9.8 緊急
Network
Elasticsearch B.V. Logstash Elasticsearch B.V.のLogstashにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-33466 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
948 4.3 警告
Network
EspoCRM EspoCRM EspoCRMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-33534 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
949 7.8 重要
Local
Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-33632 2026-04-23 10:13 2026-03-26 Show GitHub Exploit DB Packet Storm
950 5.4 警告
Network
EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-116
CWE-80
CVE-2026-33657 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348781 - zope zope Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes. NVD-CWE-Other
CVE-2001-0568 2008-09-6 05:24 2001-08-22 Show GitHub Exploit DB Packet Storm
348782 - zope zope Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet. NVD-CWE-Other
CVE-2001-0569 2008-09-6 05:24 2001-08-22 Show GitHub Exploit DB Packet Storm
348783 - openbsd
ssh
openssh
ssh
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) pass… NVD-CWE-Other
CVE-2001-0572 2008-09-6 05:24 2001-08-22 Show GitHub Exploit DB Packet Storm
348784 - sun chilisoft Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. NVD-CWE-Other
CVE-2001-0632 2008-09-6 05:24 2001-08-22 Show GitHub Exploit DB Packet Storm
348785 - sun chilisoft Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebr… NVD-CWE-Other
CVE-2001-0633 2008-09-6 05:24 2001-08-22 Show GitHub Exploit DB Packet Storm
348786 - raytheon silentrunner Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2… NVD-CWE-Other
CVE-2001-0636 2008-09-6 05:24 2001-09-20 Show GitHub Exploit DB Packet Storm
348787 - orange_software orange_web_server Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version. NVD-CWE-Other
CVE-2001-0647 2008-09-6 05:24 2001-08-6 Show GitHub Exploit DB Packet Storm
348788 - ibm aix Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges. NVD-CWE-Other
CVE-2001-0671 2008-09-6 05:24 2001-12-6 Show GitHub Exploit DB Packet Storm
348789 - transsoft broker_ftp_server Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD ("CD . .") command. NVD-CWE-Other
CVE-2001-0688 2008-09-6 05:24 2001-09-20 Show GitHub Exploit DB Packet Storm
348790 - trend_micro virus_control_system Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program. NVD-CWE-Other
CVE-2001-0689 2008-09-6 05:24 2001-09-20 Show GitHub Exploit DB Packet Storm