Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1711	4.6	警告 Physics	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 回復環境のセキュリティ機能バイパスの脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-20928	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

1712	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 10 1809 Microsoft Windows 10 22h2 Microsoft Wind…	Windows Management サービスの特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-20930	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

1713	6	警告 Local	オラクル	JDK JRE Oracle GraalVM	オラクルのOracle GraalVM等の複数製品におけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22003	2026-04-27 11:28	2026-04-21	Show	GitHub Exploit DB Packet Storm

1714	3.7	低 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-22746	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

1715	8.1	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるホストの不一致による証明書の検証に関する脆弱性	CWE-297 ホストの不一致による証明書の不適切な検証	CVE-2026-22747	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

1716	6.5	警告 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-22748	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

1717	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおける保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-22753	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

1718	7.5	重要 Network	Pivotal Software, Inc.	Spring Security	VMwareのSpring Securityにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-22754	2026-04-27 11:28	2026-04-22	Show	GitHub Exploit DB Packet Storm

1719	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23344	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

1720	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23345	2026-04-27 11:28	2026-03-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350221	-	sgi	irix	mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.	NVD-CWE-Other	CVE-2002-1518	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350222	-	rapidstream watchguard	rapidstream firebox	Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arb…	NVD-CWE-Other	CVE-2002-1519	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350223	-	rapidstream watchguard	rapidstream firebox	The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows …	NVD-CWE-Other	CVE-2002-1520	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350224	-	mdg_computer_services	web_server_4d	Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.	NVD-CWE-Other	CVE-2002-1521	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350225	-	cooolsoft	powerftp	Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.	NVD-CWE-Other	CVE-2002-1522	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350226	-	daniel_arenz	mini_server	Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences.	NVD-CWE-Other	CVE-2002-1523	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350227	-	nullsoft	winamp	Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.	NVD-CWE-Other	CVE-2002-1524	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350228	-	astaware sun	searchdisc sunone_starter_kit	Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or …	NVD-CWE-Other	CVE-2002-1525	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350229	-	emumail	emu_webmail	Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.	NVD-CWE-Other	CVE-2002-1526	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

350230	-	emumail	emu_webmail	emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error tha…	NVD-CWE-Other	CVE-2002-1527	2008-09-6 05:30	2003-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed