Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1491 3.8
Adjacent
日本電気 Aterm WX11000T12
Aterm WX4200D5
Aterm 19000T12BE
Aterm WX7800T8
Aterm WX5400HP
Aterm WX3000HP2
Aterm WX1800HP
Aterm GX621A1
Aterm …
NEC Atermシリーズにおけるクロスサイトスクリプティングの脆弱性(NV26-002) CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-6059 2026-05-25 15:29 2026-05-25 Show GitHub Exploit DB Packet Storm
1492 - - 日立 Hitachi Virtual Storage Platform 日立ディスクアレイシステムにおけるSVP 脆弱性対策について (2026年3月分) - CVE-2026-23667
CVE-2026-23668
CVE-2026-23669
CVE-2026-23671
CVE-2026-23672
CVE-2026-23673
CVE-2026-23674
CVE-2026-24282
CVE-2026-24285
CVE-2026-24287
CVE-2026-24288
C…
2026-05-25 11:30 2026-05-20 Show GitHub Exploit DB Packet Storm
1493 5.5 警告
Local
Amazon.com, Inc. AWS API MCP Server Amazon.com, Inc.のAWS API MCP Serverにおける代替パスの保護に関する脆弱性 CWE-424
代替パスの不適切な保護
CVE-2026-4270 2026-05-25 10:26 2026-03-16 Show GitHub Exploit DB Packet Storm
1494 6.5 警告
Network
ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-44923 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1495 5.4 警告
Network
ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-44924 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1496 8.8 重要
Adjacent
ベリタス Veritas InfoScale Operations Manager ベリタスのVeritas InfoScale Operations Managerにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-44925 2026-05-25 10:26 2026-05-20 Show GitHub Exploit DB Packet Storm
1497 6.1 警告
Network
SimpleSAMLphp simplesamlphp-casserver SimpleSAMLphpのsimplesamlphp-casserverにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2025-65954 2026-05-25 10:26 2026-05-18 Show GitHub Exploit DB Packet Storm
1498 5.3 警告
Network
LupinLin1 JiMeng Web MCP Server LupinLin1のJiMeng Web MCP Serverにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2025-70040 2026-05-25 10:25 2026-03-9 Show GitHub Exploit DB Packet Storm
1499 5.4 警告
Network
ERLANG Erlang/ssh
Erlang/OTP
ERLANGのErlang/OTP等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-23942 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
1500 5.3 警告
Network
ERLANG Erlang/ssh
Erlang/OTP
ERLANGのErlang/OTP等の複数製品における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅)
CVE-2026-23943 2026-05-25 10:25 2026-03-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344991 - red-m 1050ap_lan_acess_point Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name. NVD-CWE-Other
CVE-2002-0398 2017-10-10 10:30 2002-07-26 Show GitHub Exploit DB Packet Storm
344992 - oracle database_server
oracle8i
oracle9i
Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect t… NVD-CWE-Other
CVE-2002-0567 2017-10-10 10:30 2002-07-3 Show GitHub Exploit DB Packet Storm
344993 - isc bind Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary co… NVD-CWE-Other
CVE-2002-0651 2017-10-10 10:30 2002-07-3 Show GitHub Exploit DB Packet Storm
344994 - pingtel xpressa The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls. NVD-CWE-Other
CVE-2002-0668 2017-10-10 10:30 2002-07-23 Show GitHub Exploit DB Packet Storm
344995 - pingtel xpressa Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the admini… NVD-CWE-Other
CVE-2002-0674 2017-10-10 10:30 2002-07-23 Show GitHub Exploit DB Packet Storm
344996 - freebsd freebsd Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an R… NVD-CWE-Other
CVE-2002-0830 2017-10-10 10:30 2002-08-12 Show GitHub Exploit DB Packet Storm
344997 - pgp corporate_desktop Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted. NVD-CWE-Other
CVE-2002-0850 2017-10-10 10:30 2002-10-4 Show GitHub Exploit DB Packet Storm
344998 - sendmail sendmail Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a… NVD-CWE-Other
CVE-2002-0906 2017-10-10 10:30 2002-10-4 Show GitHub Exploit DB Packet Storm
344999 - kde konqueror
kde
The SSL capability for Konqueror in KDE 3.0.2 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of t… NVD-CWE-Other
CVE-2002-0970 2017-10-10 10:30 2002-09-24 Show GitHub Exploit DB Packet Storm
345000 - php php The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possi… NVD-CWE-Other
CVE-2002-0986 2017-10-10 10:30 2002-09-24 Show GitHub Exploit DB Packet Storm