Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2521 7.3 重要
Local 		NVIDIA cuda toolkit NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-33229 2026-02-4 18:38 2026-01-20 Show GitHub Exploit DB Packet Storm
2522 7.3 重要
Local 		NVIDIA cuda toolkit NVIDIAのcuda toolkitにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2025-33230 2026-02-4 18:38 2026-01-20 Show GitHub Exploit DB Packet Storm
2523 6.7 警告
Local 		NVIDIA cuda toolkit NVIDIAのcuda toolkitにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-33231 2026-02-4 18:38 2026-01-20 Show GitHub Exploit DB Packet Storm
2524 4.9 警告
Network 		ブロケード コミュニケーションズ システムズ株式会社 fabric operating system ブロケード コミュニケーションズ システムズ株式会社のfabric operating systemにおける例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2025-4663 2026-02-4 18:38 2025-07-8 Show GitHub Exploit DB Packet Storm
2525 6.5 警告
Network 		GLPI-PROJECT.ORG GLPI GLPI-PROJECT.ORGのGLPIにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2025-59935 2026-02-4 18:38 2025-12-16 Show GitHub Exploit DB Packet Storm
2526 3.5 低
Network 		マイクロソフト Microsoft Edge Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性 CWE-451
ユーザインターフェースにおける重要情報の誤った表示 		CVE-2025-62224 2026-02-4 18:38 2026-01-7 Show GitHub Exploit DB Packet Storm
2527 9.8 緊急
Network 		Sangoma freepbx Sangomaのfreepbxにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2025-66039 2026-02-4 18:37 2025-12-9 Show GitHub Exploit DB Packet Storm
2528 6.1 警告
Network 		miniflux project miniflux miniflux projectのminifluxにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2025-67713 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
2529 4.3 警告
Network 		ZITADEL ZITADEL ZITADELにおける認可されていない制御領域への重要情報の漏えいに関する脆弱性 CWE-497
認可されていない制御領域への重要情報の漏えい 		CVE-2025-67717 2026-02-4 18:37 2025-12-11 Show GitHub Exploit DB Packet Storm
2530 6.5 警告
Network 		Pterodactyl Panel PterodactylのPanelにおける複数の脆弱性 CWE-400
CWE-413
CWE-667
CVE-2025-69198 2026-02-4 18:37 2026-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348331 - redhat redhat_package_manager A large degree of social engineering and user interaction is neccessary to exploit this vulnerbility. NVD-CWE-Other
CVE-2002-2204 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348332 - webresolve webresolve Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname. NVD-CWE-Other
CVE-2002-2205 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348333 - symantec norton_antivirus The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries. NVD-CWE-Other
CVE-2002-2206 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348334 - eric_rescorla ssldump Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret. NVD-CWE-Other
CVE-2002-2207 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348335 - pablo_software_solutions baby_ftp_server Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2002-2209 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348336 - openoffice openoffice The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. NVD-CWE-Other
CVE-2002-2210 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348337 - isc
fujitsu 		bind
uxp_v 		The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that … NVD-CWE-Other
CVE-2002-2212 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348338 - infoblox
isc 		dns_one
bind 		The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack th… NVD-CWE-Other
CVE-2002-2213 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348339 - php php The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header. NVD-CWE-Other
CVE-2002-2214 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
348340 - php php The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which trigger… NVD-CWE-Other
CVE-2002-2215 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm