Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
991	5.3	警告 Network	free5gc	free5gc	free5GCにおける複数の脆弱性	CWE-636 CWE-754	CVE-2026-40249	2026-04-23 10:11	2026-04-16	Show	GitHub Exploit DB Packet Storm

992	8.1	重要 Network	FastGPT	FastGPT	FastGPTにおける複数の脆弱性	CWE-284 CWE-639	CVE-2026-40252	2026-04-23 10:10	2026-04-10	Show	GitHub Exploit DB Packet Storm

993	5	警告 Network	Weblate	Weblate	Weblateにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40256	2026-04-23 10:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

994	7.8	重要 Local	Debian LibTIFF レッドハット	LibTIFF Red Hat Enterprise Linux Red Hat Hardened Images Debian GNU/Linux	Debian等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-4775	2026-04-23 10:10	2026-03-24	Show	GitHub Exploit DB Packet Storm

995	5.5	警告 Local	freedesktop.org レッドハット	Polkit Red Hat OpenShift Container Platform Red Hat Enterprise Linux	freedesktop.org等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-4897	2026-04-23 10:10	2026-03-26	Show	GitHub Exploit DB Packet Storm

996	9.9	緊急 Network	レッドハット	openshift ai	レッドハットのopenshift aiにおける送信データへの重要な情報の挿入に関する脆弱性	CWE-201 送信データへの重要な情報の挿入	CVE-2026-5483	2026-04-23 10:10	2026-04-10	Show	GitHub Exploit DB Packet Storm

997	7.5	重要 Network	ザイオソフト株式会社	Ziostation2	Ziostation2におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40062	2026-04-22 14:16	2026-04-22	Show	GitHub Exploit DB Packet Storm

998	7.8	重要 Local	ジャパンメディアシステム株式会社	Windows PC用LiveOn Meetクライアントインストーラキヤノンネットワークカメラ用プラグインインストーラ	LiveOn MeetのWindows PC用クライアントインストーラおよびプラグインインストーラにおける任意のDLL読み込みの脆弱性	CWE-Other その他	CVE-2026-32679	2026-04-22 14:08	2026-04-22	Show	GitHub Exploit DB Packet Storm

999	6.1	警告 Network	DeepL	DeepL	DeepL Chrome拡張機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40451	2026-04-22 12:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

1000	9.9	緊急 Network	Percona	Percona Monitoring and Management	PerconaのPercona Monitoring and Managementにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25212	2026-04-22 10:10	2026-04-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348221	-	gafware	cfximage	showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.	NVD-CWE-Other	CVE-2002-0879	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348222	-	compaq	proliant_bl_e-class_integrated_administrator_firmware	Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.	NVD-CWE-Other	CVE-2002-0883	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348223	-	juniper	netscreen_screenos	The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.	NVD-CWE-Other	CVE-2002-0891	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348224	-	new_atlanta_communications	servletexec_isapi	The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a f…	NVD-CWE-Other	CVE-2002-0892	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348225	-	new_atlanta_communications	servletexec_isapi	Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "…	NVD-CWE-Other	CVE-2002-0893	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348226	-	new_atlanta_communications	servletexec_isapi	NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP…	NVD-CWE-Other	CVE-2002-0894	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348227	-	matu	matu_ftp	Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.	NVD-CWE-Other	CVE-2002-0895	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348228	-	swatch	swatch	The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression…	NVD-CWE-Other	CVE-2002-0896	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348229	-	intranet-server	localweb2000	LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.	NVD-CWE-Other	CVE-2002-0897	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

348230	-	blueface	falcon_web_server	Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).	NVD-CWE-Other	CVE-2002-0899	2008-09-6 05:29	2002-10-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed