Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
231 5.3 警告
Network
Exim Development Exim Exim DevelopmentのEximにおける境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-40686 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
232 9.1 緊急
Network
Exim Development Exim Exim DevelopmentのEximにおけるリソースの初期化の不備に関する脆弱性 New CWE-909
リソースの初期化の不備
CVE-2026-40687 2026-05-7 12:00 2026-04-30 Show GitHub Exploit DB Packet Storm
233 6.5 警告
Network
The Prosody Team Prosody The Prosody TeamのProsodyにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-43504 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
234 6.5 警告
Network
The Prosody Team Prosody The Prosody TeamのProsodyにおける保護されていない代替チャネルに関する脆弱性 New CWE-420
保護されていない代替チャネル
CVE-2026-43505 2026-05-7 12:00 2026-05-1 Show GitHub Exploit DB Packet Storm
235 7.5 重要
Network
The Prosody Team Prosody The Prosody TeamのProsodyにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2026-43506 2026-05-7 11:59 2026-05-1 Show GitHub Exploit DB Packet Storm
236 7.5 重要
Network
The Prosody Team Prosody The Prosody TeamのProsodyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-43507 2026-05-7 11:59 2026-05-1 Show GitHub Exploit DB Packet Storm
237 7.5 重要
Network
Debian
GStreamer
レッドハット
GStreamer
Debian GNU/Linux
Red Hat Enterprise Linux
GStreamer Good Plug-ins
Debian等の複数ベンダの製品における境界外読み取りに関する脆弱性 New CWE-125
境界外読み取り
CVE-2026-1940 2026-05-7 11:31 2026-03-23 Show GitHub Exploit DB Packet Storm
238 9.8 緊急
Network
OPPO ColorOS Assistant OPPOのColorOS Assistantにおける複数の脆弱性 New CWE-22
CWE-23
CVE-2026-22070 2026-05-7 11:31 2026-04-30 Show GitHub Exploit DB Packet Storm
239 8.8 重要
Network
GeoVision GV-LPC2211 Firmware
GV-LPC2011 Firmware
GeoVisionのGV-LPC2011 Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-42364 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
240 7.5 重要
Network
GeoVision GV-LPC2211 Firmware
GV-LPC2011 Firmware
GeoVisionのGV-LPC2011 Firmware等の複数製品における観測された状態からの推測に関する脆弱性 New CWE-341
観測された状態からの推測
CVE-2026-42365 2026-05-7 11:31 2026-05-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350331 - hp jetadmin HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password. NVD-CWE-Other
CVE-2001-1040 2008-09-6 05:25 2001-08-31 Show GitHub Exploit DB Packet Storm
350332 - topher1kenobe awol AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable. NVD-CWE-Other
CVE-2001-1048 2008-09-6 05:25 2001-10-2 Show GitHub Exploit DB Packet Storm
350333 - ibm aix Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. NVD-CWE-Other
CVE-2001-1061 2008-09-6 05:25 2001-08-31 Show GitHub Exploit DB Packet Storm
350334 - lucent
simon_horms
radius Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers th… NVD-CWE-Other
CVE-2001-1081 2008-09-6 05:25 2001-07-6 Show GitHub Exploit DB Packet Storm
350335 - lucent
simon_horms
radius Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-2001-1082 2008-09-6 05:25 2001-07-13 Show GitHub Exploit DB Packet Storm
350336 - khamil_landross_and_zack_jones eftp EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that o… NVD-CWE-Other
CVE-2001-1110 2008-09-6 05:25 2001-09-12 Show GitHub Exploit DB Packet Storm
350337 - whitsoft_development slimftpd Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command. NVD-CWE-Other
CVE-2001-1131 2008-09-6 05:25 2001-08-21 Show GitHub Exploit DB Packet Storm
350338 - bsdi bsd_os Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. NVD-CWE-Other
CVE-2001-1133 2008-09-6 05:25 2001-08-21 Show GitHub Exploit DB Packet Storm
350339 - ascii_nt winwrapper_professional Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. NVD-CWE-Other
CVE-2001-1139 2008-09-6 05:25 2001-08-22 Show GitHub Exploit DB Packet Storm
350340 - argosoft ftp_server ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges. NVD-CWE-Other
CVE-2001-1142 2008-09-6 05:25 2001-07-12 Show GitHub Exploit DB Packet Storm