Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3401	6.5	警告 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-35165	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3402	5.4	警告 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)における複数の脆弱性	CWE-552 CWE-79 CWE-79	CVE-2026-35169	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3403	4.3	警告 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-35400	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3404	5.4	警告 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-35403	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3405	8.6	重要 Network	McGill University	LORIS (Longitudinal Online Research and Imaging System)	McGill UniversityのLORIS (Longitudinal Online Research and Imaging System)における外部からアクセス可能なファイルまたはディレクトリに関する脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-35446	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3406	4.3	警告 Network	inventree project	inventree	inventree projectのinventreeにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-35476	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3407	4.7	警告 Network	inventree project	inventree	inventree projectのinventreeにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-35479	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3408	7.1	重要 Network	inventree project	inventree	inventree projectのinventreeにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-39362	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3409	4.8	警告 Network	Ci4-cms-erp	Ci4MS	Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-39390	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

3410	5.3	警告 Network	hono	node-server	honoのnode-serverにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-39406	2026-04-23 10:12	2026-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352021	-	trustix	secure_linux	Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.	NVD-CWE-Other	CVE-2000-0791	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

352022	-	alan_cox	gnome-lokkit	Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available.	NVD-CWE-Other	CVE-2000-0792	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

352023	-	hp	hp-ux	Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option.	NVD-CWE-Other	CVE-2000-0801	2008-09-6 05:21	2000-10-20	Show	GitHub Exploit DB Packet Storm

352024	-	fastream	ftp\+\+_server	Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.	NVD-CWE-Other	CVE-2000-0831	2008-09-6 05:21	2000-11-14	Show	GitHub Exploit DB Packet Storm

352025	-	sco	openserver	snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.	NVD-CWE-Other	CVE-2000-0147	2008-09-6 05:20	2000-02-8	Show	GitHub Exploit DB Packet Storm

352026	-	realnetworks	realplayer	Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.	NVD-CWE-Other	CVE-2000-0280	2008-09-6 05:20	2000-04-3	Show	GitHub Exploit DB Packet Storm

352027	-	napster	napster_client	Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.	NVD-CWE-Other	CVE-2000-0281	2008-09-6 05:20	2000-03-26	Show	GitHub Exploit DB Packet Storm

352028	-	sco	open_desktop openserver unixware	Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.	NVD-CWE-Other	CVE-2000-0307	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

352029	-	netscape sco	enterprise_server fasttrack_server proxy_server unixware	Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.	NVD-CWE-Other	CVE-2000-0308	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

352030	-	openbsd	openbsd	cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.	NVD-CWE-Other	CVE-2000-0312	2008-09-6 05:20	2001-03-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed