Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける解放済みメモリの使用に関する脆弱性 New CWE-416
解放済みメモリの使用 		CVE-2026-8390 2026-05-18 12:09 2026-05-12 Show GitHub Exploit DB Packet Storm
202 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション 		CVE-2025-12669 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
203 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2025-13874 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
204 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける入力で指定された数量の不適切な検証に関する脆弱性 New CWE-1284
入力で指定された数量の不適切な検証 		CVE-2025-14869 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
205 7.5 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2025-14870 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
206 5.6 警告
Network 		デル elastic cloud storage
Dell ObjectScale 		デルのelastic cloud storage等の複数製品における認証回避の脆弱性 New CWE-302
認証回避の脆弱性 		CVE-2025-43992 2026-05-18 12:08 2026-05-11 Show GitHub Exploit DB Packet Storm
207 6.7 警告
Local 		フォーティネット FortiAP-U
FortiAP
FortiAP-W2 		フォーティネットのFortiAP-U等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2025-53680 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
208 7.2 重要
Network 		フォーティネット FortiMail フォーティネットのFortiMailにおけるSQL インジェクションの脆弱性 New CWE-89
SQLインジェクション 		CVE-2025-53681 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
209 8.8 重要
Network 		フォーティネット FortiOS フォーティネットのFortiOSにおける境界外書き込みに関する脆弱性 New CWE-787
境界外書き込み 		CVE-2025-53844 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
210 6.7 警告
Local 		フォーティネット FortiAP
FortiAP-W2 		フォーティネットのFortiAP-W2等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2025-53870 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346351 - qualcomm eudora Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing… NVD-CWE-Other
CVE-2002-1770 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346352 - matt_wright formmail Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realnam… NVD-CWE-Other
CVE-2002-1771 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346353 - novell netware Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "net use" on an NDS_ADM account that is not… NVD-CWE-Other
CVE-2002-1772 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346354 - mirabilis icq_for_macos_x Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request. NVD-CWE-Other
CVE-2002-1773 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346355 - symantec norton_personal_firewall Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan. NVD-CWE-Other
CVE-2002-1778 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346356 - alcatech_gmbh bpm_studio_pro BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. NOTE: it has bee… NVD-CWE-Other
CVE-2002-1780 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346357 - delegate delegate Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy. NVD-CWE-Other
CVE-2002-1781 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346358 - university_of_washington uw-imap The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrar… NVD-CWE-Other
CVE-2002-1782 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346359 - php php CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected… NVD-CWE-Other
CVE-2002-1783 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm
346360 - openbb openbb Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror a… NVD-CWE-Other
CVE-2002-1829 2017-07-11 10:29 2002-12-31 Show GitHub Exploit DB Packet Storm