Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1761 2.7 低
Network 		OpenBao OpenBao OpenBaoにおけるセキュリティトークンの割り当ての制限に関する脆弱性 CWE-1259
セキュリティトークンの割り当ての不適切な制限 		CVE-2026-40264 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
1762 4.3 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40305 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1763 6.5 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-40306 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1764 8 重要
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-40321 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1765 5.3 警告
Network 		The FastAPI Expert python-multipart The FastAPI Expertのpython-multipartにおける複数の脆弱性 CWE-400
CWE-834
CVE-2026-40347 2026-04-27 10:48 2026-04-18 Show GitHub Exploit DB Packet Storm
1766 5.4 警告
Network 		wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1767 7.6 重要
Network 		wger wger wger Projectのwgerにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1768 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
1769 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
1770 7.1 重要
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-40599 2026-04-27 10:47 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347191 - 3r_soft mailstudio_2000 mailview.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0526 2008-09-11 04:04 2000-06-9 Show GitHub Exploit DB Packet Storm
347192 - 3r_soft mailstudio_2000 userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. NVD-CWE-Other
CVE-2000-0527 2008-09-11 04:04 2000-06-9 Show GitHub Exploit DB Packet Storm
347193 - microsoft virtual_machine Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. CWE-200
Information Exposure 		CVE-2000-0132 2008-09-11 04:03 2000-01-31 Show GitHub Exploit DB Packet Storm
347194 - h._nomura tiny_ftpdaemon Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands. NVD-CWE-Other
CVE-2000-0133 2008-09-11 04:03 2000-02-1 Show GitHub Exploit DB Packet Storm
347195 - axis 700_network_document_server Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0144 2008-09-11 04:03 2000-02-7 Show GitHub Exploit DB Packet Storm
347196 - novell groupwise The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. NVD-CWE-Other
CVE-2000-0146 2008-09-11 04:03 2000-02-7 Show GitHub Exploit DB Packet Storm
347197 - gnu make GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands. NVD-CWE-Other
CVE-2000-0151 2008-09-11 04:03 2000-02-1 Show GitHub Exploit DB Packet Storm
347198 - novell bordermanager Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. NVD-CWE-Other
CVE-2000-0152 2008-09-11 04:03 2000-03-30 Show GitHub Exploit DB Packet Storm
347199 - netbsd netbsd NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process. NVD-CWE-Other
CVE-2000-0157 2008-09-11 04:03 2000-02-1 Show GitHub Exploit DB Packet Storm
347200 - freebsd freebsd asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file. NVD-CWE-Other
CVE-2000-0163 2008-09-11 04:03 2000-02-21 Show GitHub Exploit DB Packet Storm