Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3001 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35360 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3002 5.6 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35363 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3003 6.3 警告
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-35364 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3004 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て 		CVE-2026-35367 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3005 7.8 重要
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-35368 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3006 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-35377 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3007 3.3 低
Local 		Uutils uutils coreutils Uutilsのuutils coreutilsにおける指定された機能の不適切な提供に関する脆弱性 CWE-684
指定された機能の不適切な提供 		CVE-2026-35381 2026-04-27 11:17 2026-04-22 Show GitHub Exploit DB Packet Storm
3008 5.4 警告
Network 		Papra Papra Papraにおける複数の脆弱性 CWE-79
CWE-80
CVE-2026-35460 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
3009 4.3 警告
Network 		Papra Papra Papraにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35461 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
3010 4.3 警告
Network 		Papra Papra Papraにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2026-35462 2026-04-27 11:17 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346921 - mozilla bugzilla editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values f… NVD-CWE-Other
CVE-2002-1196 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346922 - mozilla bugzilla bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail. NVD-CWE-Other
CVE-2002-1197 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346923 - mozilla bugzilla Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack. NVD-CWE-Other
CVE-2002-1198 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346924 - ibm aix IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing t… NVD-CWE-Other
CVE-2002-1201 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346925 - ibm secureway_firewall IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaust… CWE-399
 Resource Management Errors 		CVE-2002-1203 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346926 - jason_orcutt prometheus Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.… NVD-CWE-Other
CVE-2002-1211 2016-10-18 11:24 2002-11-12 Show GitHub Exploit DB Packet Storm
346927 - gnu tar GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security che… NVD-CWE-Other
CVE-2002-1216 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346928 - kth heimdal Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access. NVD-CWE-Other
CVE-2002-1225 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346929 - kth heimdal Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffe… NVD-CWE-Other
CVE-2002-1226 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm
346930 - avaya cajun_p550
cajun_p550r
cajun_p580
cajun_p880
cajun_p882 		Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges. NVD-CWE-Other
CVE-2002-1229 2016-10-18 11:24 2002-10-28 Show GitHub Exploit DB Packet Storm