Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1061 7.5 重要
Network
Belkin International N300 firmware U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2026-36959 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1062 8.8 重要
Network
Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware
Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性 CWE-494
ダウンロードしたコードの完全性検証不備
CVE-2026-40066 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1063 8.1 重要
Adjacent
Anviz Global Crosschex Standard Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性 CWE-940
通信チャネルの送信元の不適切な検証
CVE-2026-40434 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1064 7.5 重要
Network
Anviz Global Anviz CX7 Firmware
Anviz CX2 Lite Firmware
Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-40461 2026-05-7 11:29 2026-04-17 Show GitHub Exploit DB Packet Storm
1065 5.3 警告
Network
asrmicro ASR1901 Firmware
ASR1903 Firmware
asrmicroのASR1901 Firmware等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-42800 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1066 7.5 重要
Network
OpenStack Ironic Python Agent OpenStackのIronic Python Agentにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み
CVE-2026-43003 2026-05-7 11:29 2026-05-1 Show GitHub Exploit DB Packet Storm
1067 5.9 警告
Network
PerlDancer Dancer::Session::Abstract PerlDancerのDancer::Session::Abstractにおける複数の脆弱性 CWE-338
CWE-340
CVE-2026-5080 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
1068 5.5 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2026-5475 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
1069 4.6 警告
Adjacent
NASA Core Flight System (cFS) NASAのCore Flight System (cFS)における複数の脆弱性 CWE-189
CWE-190
CVE-2026-5476 2026-05-7 11:29 2026-04-3 Show GitHub Exploit DB Packet Storm
1070 7.8 重要
Local
IBM IBM Turbonomic Prometurbo agent IBMのIBM Turbonomic Prometurbo agentにおける権限管理に関する脆弱性 CWE-269
CWE-noinfo
CVE-2026-6389 2026-05-7 11:29 2026-04-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350891 - oracle oracle9i Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521. NVD-CWE-Other
CVE-2002-0509 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350892 - linux linux_kernel The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Li… NVD-CWE-Other
CVE-2002-0510 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350893 - nscd nscd The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which cou… NVD-CWE-Other
CVE-2002-0511 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350894 - caldera openlinux_server
openlinux_workstation
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of oth… NVD-CWE-Other
CVE-2002-0512 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350895 - squirrelmail squirrelmail SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie. NVD-CWE-Other
CVE-2002-0516 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350896 - caldera unixware
openunix
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to progra… NVD-CWE-Other
CVE-2002-0517 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350897 - freebsd freebsd The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using synco… NVD-CWE-Other
CVE-2002-0518 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350898 - asp-nuke asp-nuke Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag. NVD-CWE-Other
CVE-2002-0520 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350899 - asp-nuke asp-nuke Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.… NVD-CWE-Other
CVE-2002-0521 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm
350900 - asp-nuke asp-nuke ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie. NVD-CWE-Other
CVE-2002-0522 2008-09-6 05:28 2002-08-12 Show GitHub Exploit DB Packet Storm