Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2011	9.8	緊急 Network	Academia ERP	Student Information System	Academia ERPのStudent Information Systemにおけるパストラバーサルの脆弱性	CWE-24 パストラバーサル (../filedir)	CVE-2024-53636	2026-02-2 19:27	2025-04-26	Show	GitHub Exploit DB Packet Storm

2012	4.9	警告 Network	Palo Alto Networks	PAN-OS	Palo Alto NetworksのPAN-OSにおける危険なタイプのファイルの無制限アップロードに関する脆弱性	CWE-434 危険なタイプのファイルの無制限アップロード	CVE-2024-5911	2026-02-2 19:27	2024-07-10	Show	GitHub Exploit DB Packet Storm

2013	9.8	緊急 Network	LimeSurvey	LimeSurvey	LimeSurveyにおける複数の脆弱性	CWE-74 CWE-89 CWE-89	CVE-2024-6933	2026-02-2 19:27	2024-07-21	Show	GitHub Exploit DB Packet Storm

2014	7.8	重要 Local	ブロケードコミュニケーションズシステムズ株式会社	fabric operating system	ブロケードコミュニケーションズシステムズ株式会社のfabric operating systemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2024-7517	2026-02-2 19:27	2024-11-21	Show	GitHub Exploit DB Packet Storm

2015	4.9	警告 Network	LimeSurvey	LimeSurvey	LimeSurveyにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性	CWE-404 リソースの不適切なシャットダウンおよびリリース	CVE-2024-7887	2026-02-2 19:27	2024-08-17	Show	GitHub Exploit DB Packet Storm

2016	7.8	重要 Local	UPDF	UPDF	UPDFにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-10214	2026-02-2 19:27	2025-09-10	Show	GitHub Exploit DB Packet Storm

2017	7.8	重要 Local	Imagination Technologies Limited	GPU DDK	Imagination Technologies LimitedのGPU DDKにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-10865	2026-02-2 19:27	2026-01-13	Show	GitHub Exploit DB Packet Storm

2018	9.1	緊急 Network	Zoho Corporation	ManageEngine ADSelfService Plus	Zoho CorporationのManageEngine ADSelfService Plusにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2025-11250	2026-02-2 19:27	2026-01-13	Show	GitHub Exploit DB Packet Storm

2019	7.5	重要 Network	OpenVPN Technologies	OpenVPN	OpenVPN TechnologiesのOpenVPNにおける通信チャネルの送信元の不適切な検証に関する脆弱性	CWE-940 通信チャネルの送信元の不適切な検証	CVE-2025-13086	2026-02-2 19:27	2025-12-3	Show	GitHub Exploit DB Packet Storm

2020	7.5	重要 Network	Docker	docker desktop	DockerのDocker Desktopにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2025-13743	2026-02-2 19:27	2025-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348321	-	ibm	aix	Buffer overflow in uucp in AIX 4.3.3.	NVD-CWE-Other	CVE-2002-0745	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348322	-	ibm	aix	Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.	NVD-CWE-Other	CVE-2002-0746	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348323	-	ibm	aix	Buffer overflow in lsmcode in AIX 4.3.3.	NVD-CWE-Other	CVE-2002-0747	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348324	-	national_instruments	labview	LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/…	NVD-CWE-Other	CVE-2002-0748	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348325	-	cgiscript.net	csmailto	CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.	NVD-CWE-Other	CVE-2002-0749	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348326	-	cgiscript.net	csmailto	CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.	NVD-CWE-Other	CVE-2002-0750	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348327	-	cgiscript.net	csmailto	CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.	NVD-CWE-Other	CVE-2002-0751	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348328	-	cgiscript.net	csmailto	CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing t…	NVD-CWE-Other	CVE-2002-0752	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348329	-	talentsoft	web\+_server	Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.	NVD-CWE-Other	CVE-2002-0753	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

348330	-	freebsd kth	heimdal freebsd	Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges a…	NVD-CWE-Other	CVE-2002-0754	2008-09-6 05:28	2002-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed