Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3071	9.8	緊急 Network	Blyss	spiral-rs	Blyssのspiral-rsにおけるメモリ管理ルーチンの不一致に関する脆弱性	CWE-762 メモリ管理ルーチンの不一致	CVE-2025-48755	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

3072	9.8	緊急 Network	crates	scsir	cratesのscsirにおける型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2025-48756	2026-02-2 19:19	2025-05-24	Show	GitHub Exploit DB Packet Storm

3073	9.8	緊急 Network	Qode Interactive	MediClinic	Qode InteractiveのWordPress用MediClinicにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49295	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

3074	9.8	緊急 Network	Qode Interactive	GrandPrix	Qode InteractiveのWordPress用GrandPrixにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49296	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

3075	9.8	緊急 Network	Qode Interactive	Grill and Chow	Qode InteractiveのWordPress用Grill and Chowにおけるパストラバーサルの脆弱性	CWE-35 パストラバーサル	CVE-2025-49297	2026-02-2 19:19	2025-06-9	Show	GitHub Exploit DB Packet Storm

3076	9.8	緊急 Network	David Beazley	PLY (Python Lex-Yacc)	David BeazleyのPLY (Python Lex-Yacc)における信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2025-56005	2026-02-2 19:19	2026-01-20	Show	GitHub Exploit DB Packet Storm

3077	8.8	重要 Network	Ruijie Networks	X30 Pro ファームウェア RG-EW300T Firmware	Ruijie NetworksのRG-EW300T Firmware等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2025-56092	2026-02-2 19:19	2025-12-11	Show	GitHub Exploit DB Packet Storm

3078	6.5	警告 Network	サイボウズ	サイボウズガルーン	サイボウズ Garoonにおける複数の脆弱性	CWE-79 CWE-Other	CVE-2026-20711 CVE-2026-22881 CVE-2026-22888	2026-02-2 12:21	2026-02-2	Show	GitHub Exploit DB Packet Storm

3079	-	-	マイクロソフト	Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft Office Office Deployment Tool	Microsoft Office Click-To-Run Remote Code Execution Vulnerability	CWE-Other その他	CVE-2026-20943	2026-02-2 12:15	2026-02-2	Show	GitHub Exploit DB Packet Storm

3080	7.6	重要 Network	Sonatype Inc.	Nexus	Sonatype Nexus Repositoryにおけるサーバサイドリクエストフォージェリの脆弱性	CWE-Other その他	CVE-2026-0600	2026-02-2 12:07	2026-02-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348571	-	savant	savant_webserver	cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request.	NVD-CWE-Other	CVE-2002-2146	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348572	-	lucent	ascend_max_router ascend_pipeline_router dslterminator	Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and I…	NVD-CWE-Other	CVE-2002-2148	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348573	-	lucent	access_point_service_router_1500 access_point_service_router_300 access_point_service_router_600	Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.	NVD-CWE-Other	CVE-2002-2149	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348574	-	juniper	netscreen_screenos	Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UD…	NVD-CWE-Other	CVE-2002-2150	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348575	-	software602	602pro_lan_suite	The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password p…	NVD-CWE-Other	CVE-2002-2152	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348576	-	cerulean_studios	trillian	Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string…	NVD-CWE-Other	CVE-2002-2155	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348577	-	cerulean_studios	trillian	Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.	NVD-CWE-Other	CVE-2002-2156	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348578	-	zendocs	zentrack	zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.	NVD-CWE-Other	CVE-2002-2158	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348579	-	kerio	personal_firewall	Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood.	NVD-CWE-Other	CVE-2002-2161	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

348580	-	cerulean_studios	trillian	Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user account…	NVD-CWE-Other	CVE-2002-2162	2008-09-6 05:32	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed