Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2581	7.5	重要 Network	XWiki	CryptPad	XWikiのCryptPadにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2025-51846	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

2582	6.4	警告 Local	レッドハット	process automation manager	レッドハットのprocess automation managerにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-58713	2026-05-7 11:29	2026-04-8	Show	GitHub Exploit DB Packet Storm

2583	4.8	警告 Network	GNU Project	GNU Wget2	GNU ProjectのGNU Wget2における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-1858	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

2584	6.5	警告 Adjacent	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における範囲外のポインタオフセットの使用に関する脆弱性	CWE-823 範囲外のポインタオフセットの使用	CVE-2026-20022	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

2585	6.5	警告 Adjacent	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-20023	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

2586	5.7	警告 Adjacent	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Software等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-20024	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

2587	8.6	重要 Network	シスコシステムズ	Adaptive Security Appliance (ASA) Software	シスコシステムズのAdaptive Security Appliance (ASA) Softwareにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性	CWE-772 有効なライフタイム後のリソースの解放の欠如	CVE-2026-20082	2026-05-7 11:28	2026-03-4	Show	GitHub Exploit DB Packet Storm

2588	5	警告 Network	Cloud Foundry, Inc.	routing release cf-deployment	Cloud Foundry, Inc.のCf-deployment等の複数製品における意図するエンドポイントとの通信チャネルの制限に関する脆弱性	CWE-923 意図するエンドポイントとの通信チャネルの不適切な制限	CVE-2026-22726	2026-05-7 11:28	2026-05-1	Show	GitHub Exploit DB Packet Storm

2589	6.5	警告 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22740	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

2590	3.1	低 Network	VMware	Spring Framework	VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性	CWE-524 重要な情報を含むキャッシュの使用	CVE-2026-22741	2026-05-7 11:28	2026-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352461	-	sonicwall	content_filtering	SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.	NVD-CWE-Other	CVE-2002-2181	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352462	-	seunghyun_seo	msn666	Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.	NVD-CWE-Other	CVE-2002-2182	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352463	-	phpshare	phpshare	phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers.	NVD-CWE-Other	CVE-2002-2183	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352464	-	digi-net_technologies	digichat	Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.	NVD-CWE-Other	CVE-2002-2184	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352465	-	macromedia	jrun	Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.	NVD-CWE-Other	CVE-2002-2186	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352466	-	macromedia	jrun	Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.	NVD-CWE-Other	CVE-2002-2187	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352467	-	openbsd	openbsd	OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.	NVD-CWE-Other	CVE-2002-2188	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352468	-	activxperts_software microsoft	activwebserver windows_2003_server	Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.	NVD-CWE-Other	CVE-2002-2189	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352469	-	artscore_studios	cutecast_forum	ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.	NVD-CWE-Other	CVE-2002-2190	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

352470	-	lotus	domino	Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non…	NVD-CWE-Other	CVE-2002-2191	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed