Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1971 7.1 重要
Local
libsixel project libsixel Hayaki Saito (saitoha)のlibsixelにおける複数の脆弱性 CWE-122
CWE-190
CVE-2026-33020 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1972 7.3 重要
Local
libsixel project libsixel Hayaki Saito (saitoha)のlibsixelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33021 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1973 7.8 重要
Local
libsixel project libsixel Hayaki Saito (saitoha)のlibsixelにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-33023 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1974 7.5 重要
Network
Julian Gruber brace-expansion Julian Gruber (juliangruber)のbrace-expansionにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-33750 2026-04-24 11:37 2026-03-27 Show GitHub Exploit DB Packet Storm
1975 8.1 重要
Network
Pavel Shklovsky (pab1it0) Azure Data Explorer MCP Server Pavel Shklovsky (pab1it0)のAzure Data Explorer MCP Serverにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 CWE-943
データクエリロジックの特殊要素の不適切な中立化
CVE-2026-33980 2026-04-24 11:37 2026-03-27 Show GitHub Exploit DB Packet Storm
1976 6.1 警告
Network
アドビシステムズ Adobe Connect
Adobe Connect Desktop Application
アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-34614 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1977 10 緊急
Network
アドビシステムズ Adobe Connect
Adobe Connect Desktop Application
アドビのAdobe Connect等の複数製品における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-34615 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1978 8.7 重要
Network
アドビシステムズ Adobe Connect
Adobe Connect Desktop Application
アドビのAdobe Connect等の複数製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-34617 2026-04-24 11:37 2026-04-14 Show GitHub Exploit DB Packet Storm
1979 7.5 重要
Network
Nhost Nhost/auth NhostのNhost/authにおける複数の脆弱性 CWE-200
CWE-598
CVE-2026-34969 2026-04-24 11:37 2026-04-6 Show GitHub Exploit DB Packet Storm
1980 9.8 緊急
Network
Aperi'Solve Aperi'Solve Aperi'SolveにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-34977 2026-04-24 11:37 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347201 - microsoft internet_information_server IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory. NVD-CWE-Other
CVE-2000-0167 2008-09-11 04:03 2000-02-15 Show GitHub Exploit DB Packet Storm
347202 - oracle application_server Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes '?&'. NVD-CWE-Other
CVE-2000-0169 2008-09-11 04:03 2000-03-15 Show GitHub Exploit DB Packet Storm
347203 - redhat
turbolinux
linux
turbolinux
Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variable. NVD-CWE-Other
CVE-2000-0170 2008-09-11 04:03 2000-02-26 Show GitHub Exploit DB Packet Storm
347204 - at_computing atsar_linux atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local users to gain root privileges. NVD-CWE-Other
CVE-2000-0171 2008-09-11 04:03 2000-03-11 Show GitHub Exploit DB Packet Storm
347205 - matt_kimball_and_roger_wolff
turbolinux
mtr
turbolinux
The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges. NVD-CWE-Other
CVE-2000-0172 2008-09-11 04:03 2000-03-3 Show GitHub Exploit DB Packet Storm
347206 - sco unixware Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. NVD-CWE-Other
CVE-2000-0173 2008-09-11 04:03 2000-03-10 Show GitHub Exploit DB Packet Storm
347207 - sun staroffice StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2000-0174 2008-09-11 04:03 2000-03-9 Show GitHub Exploit DB Packet Storm
347208 - sun staroffice Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. NVD-CWE-Other
CVE-2000-0175 2008-09-11 04:03 2000-03-9 Show GitHub Exploit DB Packet Storm
347209 - cat_soft serv-u The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. NVD-CWE-Other
CVE-2000-0176 2008-09-11 04:03 2000-02-29 Show GitHub Exploit DB Packet Storm
347210 - dnstools_software dnstools DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters. NVD-CWE-Other
CVE-2000-0177 2008-09-11 04:03 2000-03-2 Show GitHub Exploit DB Packet Storm