Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
991	5.3	警告 Network	free5gc	free5gc	free5GCにおける複数の脆弱性	CWE-636 CWE-754	CVE-2026-40249	2026-04-23 10:11	2026-04-16	Show	GitHub Exploit DB Packet Storm

992	8.1	重要 Network	FastGPT	FastGPT	FastGPTにおける複数の脆弱性	CWE-284 CWE-639	CVE-2026-40252	2026-04-23 10:10	2026-04-10	Show	GitHub Exploit DB Packet Storm

993	5	警告 Network	Weblate	Weblate	Weblateにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40256	2026-04-23 10:10	2026-04-15	Show	GitHub Exploit DB Packet Storm

994	7.8	重要 Local	Debian LibTIFF レッドハット	LibTIFF Red Hat Enterprise Linux Red Hat Hardened Images Debian GNU/Linux	Debian等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-4775	2026-04-23 10:10	2026-03-24	Show	GitHub Exploit DB Packet Storm

995	5.5	警告 Local	freedesktop.org レッドハット	Polkit Red Hat OpenShift Container Platform Red Hat Enterprise Linux	freedesktop.org等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-4897	2026-04-23 10:10	2026-03-26	Show	GitHub Exploit DB Packet Storm

996	9.9	緊急 Network	レッドハット	openshift ai	レッドハットのopenshift aiにおける送信データへの重要な情報の挿入に関する脆弱性	CWE-201 送信データへの重要な情報の挿入	CVE-2026-5483	2026-04-23 10:10	2026-04-10	Show	GitHub Exploit DB Packet Storm

997	7.5	重要 Network	ザイオソフト株式会社	Ziostation2	Ziostation2におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-40062	2026-04-22 14:16	2026-04-22	Show	GitHub Exploit DB Packet Storm

998	7.8	重要 Local	ジャパンメディアシステム株式会社	Windows PC用LiveOn Meetクライアントインストーラキヤノンネットワークカメラ用プラグインインストーラ	LiveOn MeetのWindows PC用クライアントインストーラおよびプラグインインストーラにおける任意のDLL読み込みの脆弱性	CWE-Other その他	CVE-2026-32679	2026-04-22 14:08	2026-04-22	Show	GitHub Exploit DB Packet Storm

999	6.1	警告 Network	DeepL	DeepL	DeepL Chrome拡張機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-40451	2026-04-22 12:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

1000	9.9	緊急 Network	Percona	Percona Monitoring and Management	PerconaのPercona Monitoring and Managementにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-25212	2026-04-22 10:10	2026-04-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348341	-	cisco	ata-186	The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the att…	NVD-CWE-Other	CVE-2002-0769	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348342	-	id_software	quake_2i_server	Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand …	NVD-CWE-Other	CVE-2002-0770	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348343	-	hosting_controller	hosting_controller	Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.	NVD-CWE-Other	CVE-2002-0772	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348344	-	hosting_controller	hosting_controller	imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) …	NVD-CWE-Other	CVE-2002-0773	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348345	-	hosting_controller	hosting_controller	Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.	NVD-CWE-Other	CVE-2002-0774	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348346	-	hosting_controller	hosting_controller	browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.	NVD-CWE-Other	CVE-2002-0775	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348347	-	hosting_controller	hosting_controller	getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser"…	NVD-CWE-Other	CVE-2002-0776	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348348	-	ipswitch	imail	Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.	NVD-CWE-Other	CVE-2002-0777	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348349	-	novell	bordermanager	FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.	NVD-CWE-Other	CVE-2002-0779	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348350	-	novell	bordermanager	IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to AB…	NVD-CWE-Other	CVE-2002-0780	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed