Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3291 5.4 警告
Network 		Anthropic PBC Claude SDK for TypeScript (anthropic-ai/sdk) Anthropic PBCのClaude SDK for TypeScript (anthropic-ai/sdk)における複数の脆弱性 CWE-22
CWE-41
CVE-2026-34451 2026-04-21 10:42 2026-03-31 Show GitHub Exploit DB Packet Storm
3292 7.1 重要
Network 		Apache Software Foundation Skywalking MCP Apache Software FoundationのSkywalking MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-34476 2026-04-21 10:42 2026-04-13 Show GitHub Exploit DB Packet Storm
3293 7.1 重要
Network 		lobehub LobeHub lobehubのLobeHubにおける複数の脆弱性 CWE-287
CWE-290
CWE-345
CVE-2026-39411 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
3294 6.5 警告
Network 		HKUDS LightRAG HKUDSのLightRAGにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証 		CVE-2026-39413 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
3295 8.8 重要
Network 		Shopify Tophat ShopifyのTophatにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-39862 2026-04-21 10:42 2026-04-8 Show GitHub Exploit DB Packet Storm
3296 8.5 重要
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-39974 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
3297 6.5 警告
Network 		Hydro System. PHU. Szafraniec M. Control System Hydro System. PHU. Szafraniec M.のControl Systemにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-4901 2026-04-21 10:42 2026-04-9 Show GitHub Exploit DB Packet Storm
3298 4 警告
Local 		International Color Consortium (ICC) iccDEV International Color Consortium (ICC)のiccDEVにおける複数の脆弱性 CWE-562
CWE-665
CVE-2026-34553 2026-04-21 10:42 2026-03-31 Show GitHub Exploit DB Packet Storm
3299 8.2 重要
Network 		qdPM qdPM qdPMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2018-25208 2026-04-21 10:41 2026-03-26 Show GitHub Exploit DB Packet Storm
3300 5.5 警告
Local 		SolarWinds FTP Voyager SolarWindsのFTP Voyagerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2018-25252 2026-04-21 10:41 2026-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350801 - phpwebgallery phpwebgallery isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo. NVD-CWE-Other
CVE-2002-2064 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350802 - webcalendar webcalendar WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root. NVD-CWE-Other
CVE-2002-2065 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350803 - compaq tru64 Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, a… NVD-CWE-Other
CVE-2002-2071 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350804 - sun jre java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged… NVD-CWE-Other
CVE-2002-2072 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350805 - erwin_lansing mailidx SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page. NVD-CWE-Other
CVE-2002-2074 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350806 - mirabilis icq ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number. NVD-CWE-Other
CVE-2002-2075 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350807 - summit_computer_networks lil_http Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request. NVD-CWE-Other
CVE-2002-2076 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350808 - floosietek ftgateoffice
ftgatepro 		Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP US… NVD-CWE-Other
CVE-2002-2078 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350809 - mosix_project
openmosix_project 		mosix
openmosix 		mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets. NVD-CWE-Other
CVE-2002-2079 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
350810 - floosietek ftgatepro Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session. NVD-CWE-Other
CVE-2002-2080 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm