Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1601 5.4 警告
Network 		OpenClaw OpenClaw OpenClawにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41909 2026-04-30 10:58 2026-04-23 Show GitHub Exploit DB Packet Storm
1602 8.8 重要
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現 		CVE-2026-4296 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
1603 8.8 重要
Network 		Kubernetes ingress-nginx Kubernetesのingress-nginxにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-4342 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
1604 6.5 警告
Network 		レッドハット
libarchive		 Red Hat OpenShift Container Platform
Red Hat Enterprise Linux
Red Hat Hardened Images
libarchive 		libarchive等の複数ベンダの製品における整数への不適切なビットシフトに関する脆弱性 CWE-1335
整数への不適切なビットシフト 		CVE-2026-4426 2026-04-30 10:58 2026-03-19 Show GitHub Exploit DB Packet Storm
1605 7.2 重要
Network 		GitHub Enterprise Server GitHubのEnterprise ServerにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-4821 2026-04-30 10:58 2026-04-21 Show GitHub Exploit DB Packet Storm
1606 7.5 重要
Network 		OpenBMB XAgent OpenBMBのXAgentにおける複数の脆弱性 CWE-287
CWE-306
CVE-2026-4959 2026-04-30 10:58 2026-03-27 Show GitHub Exploit DB Packet Storm
1607 5.5 警告
Local 		レッドハット KVM Windows virtio ドライバ
Red Hat Enterprise Linux 		レッドハットのRed Hat Enterprise Linux等の複数製品における古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-5164 2026-04-30 10:58 2026-03-30 Show GitHub Exploit DB Packet Storm
1608 7.8 重要
Local 		レッドハット KVM Windows virtio ドライバ
Red Hat Enterprise Linux 		レッドハットのRed Hat Enterprise Linux等の複数製品における期限切れのポインタデリファレンスに関する脆弱性 CWE-825
期限切れのポインタデリファレンス 		CVE-2026-5165 2026-04-30 10:58 2026-03-30 Show GitHub Exploit DB Packet Storm
1609 8.1 重要
Network 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおける整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-5188 2026-04-30 10:58 2026-04-10 Show GitHub Exploit DB Packet Storm
1610 8 重要
Adjacent 		wolfSSL Inc. wolfSSL wolfSSL Inc.のwolfSSLにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-5295 2026-04-30 10:58 2026-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350061 - jcraft jzlib InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data. NVD-CWE-Other
CVE-2002-2102 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350062 - apache http_server Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide… NVD-CWE-Other
CVE-2002-2103 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350063 - veridis openkeyserver Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NVD-CWE-Other
CVE-2002-2107 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350064 - sony vaio_manual_cybersupport Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-ma… NVD-CWE-Other
CVE-2002-2108 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350065 - matt_wright formmail Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/… NVD-CWE-Other
CVE-2002-2109 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350066 - rca digital_cable_modem The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device. NVD-CWE-Other
CVE-2002-2110 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350067 - rca digital_cable_modem RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP acc… NVD-CWE-Other
CVE-2002-2112 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350068 - agh htmlsearch search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter. NVD-CWE-Other
CVE-2002-2113 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350069 - hns hns
hns-lite 		Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML. NVD-CWE-Other
CVE-2002-2115 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350070 - netgear rm356
rt338 		Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap. NVD-CWE-Other
CVE-2002-2116 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm