Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2471 5.4 警告
Network 		langflow langflow langflowにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-5026 2026-04-21 10:43 2026-03-27 Show GitHub Exploit DB Packet Storm
2472 5.4 警告
Network 		lfprojects mlflow lfprojectsのmlflowにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-33865 2026-04-21 10:43 2026-04-7 Show GitHub Exploit DB Packet Storm
2473 4.3 警告
Network 		lfprojects mlflow lfprojectsのmlflowにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-33866 2026-04-21 10:43 2026-04-7 Show GitHub Exploit DB Packet Storm
2474 9.1 緊急
Network 		Mervin Praison (MervinPraison) PraisonAI Mervin Praison (MervinPraison)のPraisonAIにおける信頼できない制御領域からの機能の組み込みに関する脆弱性 CWE-829
信頼性のない制御領域からの機能の組み込み 		CVE-2026-40313 2026-04-21 10:43 2026-04-14 Show GitHub Exploit DB Packet Storm
2475 6.5 警告
Network 		PAC4J pac4j PAC4Jのpac4jにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-40458 2026-04-21 10:43 2026-04-17 Show GitHub Exploit DB Packet Storm
2476 8.8 重要
Network 		PAC4J pac4j PAC4Jのpac4jにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-40459 2026-04-21 10:43 2026-04-17 Show GitHub Exploit DB Packet Storm
2477 7.8 重要
Local 		Rubicon Communications, LLC (Netgate). NETGATE Registry Cleaner Rubicon Communications, LLC (Netgate).のNETGATE Registry Cleanerにおける引用されない検索パスまたは要素に関する脆弱性 CWE-428
引用されない検索パスまたは要素 		CVE-2016-20057 2026-04-21 10:43 2026-04-4 Show GitHub Exploit DB Packet Storm
2478 6.1 警告
Network 		Thank You/Like System project Thank You/Like System MyBB GroupのThank You/Like Systemにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25247 2026-04-21 10:43 2026-04-4 Show GitHub Exploit DB Packet Storm
2479 6.1 警告
Network 		MyBB Group MyBB Last User's Threads MyBB GroupのMyBB Last User's Threadsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2018-25250 2026-04-21 10:43 2026-04-4 Show GitHub Exploit DB Packet Storm
2480 5.5 警告
Local 		AnyBurn AnyBurn AnyBurnにおける再利用前に削除されていないリソース内重要情報に関する脆弱性 CWE-226
再利用前に削除されていないリソース内重要情報 		CVE-2019-25657 2026-04-21 10:43 2026-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347421 - allaire forums Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. NVD-CWE-Other
CVE-2000-0297 2008-09-11 04:04 2000-04-3 Show GitHub Exploit DB Packet Storm
347422 - apple webobjects Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept. NVD-CWE-Other
CVE-2000-0299 2008-09-11 04:04 2000-04-4 Show GitHub Exploit DB Packet Storm
347423 - id_software quake_3_arena Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. NVD-CWE-Other
CVE-2000-0303 2008-09-11 04:04 2000-05-3 Show GitHub Exploit DB Packet Storm
347424 - openbsd openbsd The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. NVD-CWE-Other
CVE-2000-0309 2008-09-11 04:04 2001-03-12 Show GitHub Exploit DB Packet Storm
347425 - openbsd openbsd IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. NVD-CWE-Other
CVE-2000-0310 2008-09-11 04:04 2001-03-12 Show GitHub Exploit DB Packet Storm
347426 - openbsd openbsd Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. NVD-CWE-Other
CVE-2000-0313 2008-09-11 04:04 2001-03-12 Show GitHub Exploit DB Packet Storm
347427 - atrium_software mercur_mailserver Atrium Mercur Mail Server 3.2 allows local attackers to read other user's email and create arbitrary files via a dot dot (..) attack. NVD-CWE-Other
CVE-2000-0318 2008-09-11 04:04 2000-04-21 Show GitHub Exploit DB Packet Storm
347428 - icradius icradius Buffer overflow in IC Radius package allows a remote attacker to cause a denial of service via a long user name. NVD-CWE-Other
CVE-2000-0321 2008-09-11 04:04 2000-04-24 Show GitHub Exploit DB Packet Storm
347429 - on_technology meeting_maker Meeting Maker uses weak encryption (a polyalphabetic substitution cipher) for passwords, which allows remote attackers to sniff and decrypt passwords for Meeting Maker accounts. NVD-CWE-Other
CVE-2000-0326 2008-09-11 04:04 2000-04-25 Show GitHub Exploit DB Packet Storm
347430 - allaire spectra The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the cont… NVD-CWE-Other
CVE-2000-0334 2008-09-11 04:04 2000-04-24 Show GitHub Exploit DB Packet Storm