Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
321	7.8	重要 Local	デル	PowerFlex Rack PowerFlex appliance Intelligent Catalog Software PowerFlex Manager	デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における不適切な権限設定に関する脆弱性	CWE-266 不適切な権限設定	CVE-2025-32747	2026-05-28 14:33	2026-05-22	Show	GitHub Exploit DB Packet Storm

322	7.5	重要 Network	デル	PowerFlex Rack PowerFlex appliance Intelligent Catalog Software PowerFlex Manager	デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32749	2026-05-28 14:33	2026-05-22	Show	GitHub Exploit DB Packet Storm

323	5.5	警告 Local	デル	PowerFlex Rack PowerFlex appliance Intelligent Catalog Software PowerFlex Manager	デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における重要な情報のセキュアでない格納に関する脆弱性	CWE-922 重要な情報のセキュアでない格納	CVE-2025-32751	2026-05-28 14:33	2026-05-22	Show	GitHub Exploit DB Packet Storm

324	5.5	警告 Local	デル	PowerFlex Rack PowerFlex appliance Intelligent Catalog Software PowerFlex Manager	デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における暗号アルゴリズムの使用に関する脆弱性	CWE-327 不完全、または危険な暗号アルゴリズムの使用	CVE-2025-46371	2026-05-28 14:33	2026-05-22	Show	GitHub Exploit DB Packet Storm

325	6.5	警告 Network	Splunk	Splunk AI Toolkit	SplunkのSplunk AI Toolkitにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-20238	2026-05-28 14:33	2026-05-20	Show	GitHub Exploit DB Packet Storm

326	7.5	重要 Network	NVIDIA	NVIDIA TensorRT	NVIDIAのNVIDIA TensorRTにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-24188	2026-05-28 14:33	2026-05-20	Show	GitHub Exploit DB Packet Storm

327	5.3	警告 Network	Dropbox	Erlang SAML library	Lexi Wilson (arekinath)等の複数ベンダの製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2026-28809	2026-05-28 14:33	2026-03-23	Show	GitHub Exploit DB Packet Storm

328	9.1	緊急 Network	Nexent	Nexent	Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-31215	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

329	9.1	緊急 Network	Nexent	Nexent	Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-31216	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

330	9.8	緊急 Network	Nebuly	OptiMate	NebulyのOptiMateにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-31217	2026-05-28 14:33	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355681	-	npds	npds	Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1804	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355682	-	dacode	dacode	Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1805	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355683	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1806	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355684	-	phpwebsite	phpwebsite	Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.	NVD-CWE-Other	CVE-2002-1807	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355685	-	zack_coburn	meunity_community_system	Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic.	NVD-CWE-Other	CVE-2002-1808	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355686	-	belkin	f5d6130_wnap	Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.	NVD-CWE-Other	CVE-2002-1811	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355687	-	gdam	gdam	Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.	NVD-CWE-Other	CVE-2002-1812	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355688	-	aol	instant_messenger	Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.	NVD-CWE-Other	CVE-2002-1813	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355689	-	gnome mandrakesoft redhat slackware	bonobo mandrake_linux linux slackware_linux	Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.	NVD-CWE-Other	CVE-2002-1814	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

355690	-	aquonics_scripting	aquonics_file_manager	Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.	NVD-CWE-Other	CVE-2002-1815	2008-09-6 05:31	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed