Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2521	7.3	重要 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-33229	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

2522	7.3	重要 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-33230	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

2523	6.7	警告 Local	NVIDIA	cuda toolkit	NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2025-33231	2026-02-4 18:38	2026-01-20	Show	GitHub Exploit DB Packet Storm

2524	4.9	警告 Network	ブロケードコミュニケーションズシステムズ株式会社	fabric operating system	ブロケードコミュニケーションズシステムズ株式会社のfabric operating systemにおける例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-4663	2026-02-4 18:38	2025-07-8	Show	GitHub Exploit DB Packet Storm

2525	6.5	警告 Network	GLPI-PROJECT.ORG	GLPI	GLPI-PROJECT.ORGのGLPIにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-59935	2026-02-4 18:38	2025-12-16	Show	GitHub Exploit DB Packet Storm

2526	3.5	低 Network	マイクロソフト	Microsoft Edge	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2025-62224	2026-02-4 18:38	2026-01-7	Show	GitHub Exploit DB Packet Storm

2527	9.8	緊急 Network	Sangoma	freepbx	Sangomaのfreepbxにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2025-66039	2026-02-4 18:37	2025-12-9	Show	GitHub Exploit DB Packet Storm

2528	6.1	警告 Network	miniflux project	miniflux	miniflux projectのminifluxにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2025-67713	2026-02-4 18:37	2025-12-11	Show	GitHub Exploit DB Packet Storm

2529	4.3	警告 Network	ZITADEL	ZITADEL	ZITADELにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2025-67717	2026-02-4 18:37	2025-12-11	Show	GitHub Exploit DB Packet Storm

2530	6.5	警告 Network	Pterodactyl	Panel	PterodactylのPanelにおける複数の脆弱性	CWE-400 CWE-413 CWE-667	CVE-2025-69198	2026-02-4 18:37	2026-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348111	-	valve_software	half-life_cstrike_dedicated_server	The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.1.1.0 and earlier allows remote authenticated users to cause a denial of service (infinite loop and daemo…	NVD-CWE-Other	CVE-2003-1325	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348112	-	washington_university	wu-ftpd	ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers…	NVD-CWE-Other	CVE-2003-1329	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348113	-	aprelium_technologies	abyss_web_server	The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mo…	NVD-CWE-Other	CVE-2003-1363	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348114	-	ralf_hoffmann	worker_filemanager	Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2003-1460	2008-09-6 05:36	2003-12-31	Show	GitHub Exploit DB Packet Storm

348115	-	tomi_manninen	linuxnode	Buffer overflow in LinuxNode (node) before 0.3.2 allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2003-0707	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

348116	-	tomi_manninen	linuxnode	Format string vulnerability in LinuxNode (node) before 0.3.2 may allow attackers to cause a denial of service or execute arbitrary code.	NVD-CWE-Other	CVE-2003-0708	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

348117	-	compaq	tru64	ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.	NVD-CWE-Other	CVE-2003-0724	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

348118	-	realnetworks	helix_universal_server realserver	Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and RealServer G2 allows…	NVD-CWE-Other	CVE-2003-0725	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

348119	-	cisco	resource_manager resource_manager_essentials ciscoworks_common_management_foundation ciscoworks_cd1	CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to obtain restricted information and possibly gain administrative privileges by changing the "guest" user to the Ad…	NVD-CWE-Other	CVE-2003-0732	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

348120	-	bea	liquid_data weblogic_integration weblogic_server	Multiple cross-site scripting (XSS) vulnerabilities in WebLogic Integration 7.0 and 2.0, Liquid Data 1.1, and WebLogic Server and Express 5.1 through 7.0, allow remote attackers to execute arbitrary …	NVD-CWE-Other	CVE-2003-0733	2008-09-6 05:35	2003-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed