Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3641 6.8 警告
Network 		Weblate Weblate Weblateにおける複数の脆弱性 CWE-200
CWE-22
CVE-2026-33220 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
3642 8 重要
Network 		Weblate Weblate Weblateにおける複数の脆弱性 CWE-23
CWE-434
CWE-94
CVE-2026-33435 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
3643 5 警告
Network 		Weblate Weblate Weblateにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33440 2026-04-23 10:13 2026-04-15 Show GitHub Exploit DB Packet Storm
3644 4.3 警告
Network 		Elasticsearch B.V. Kibana Elasticsearch B.V.のKibanaにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33460 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
3645 9.8 緊急
Network 		Elasticsearch B.V. Logstash Elasticsearch B.V.のLogstashにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33466 2026-04-23 10:13 2026-04-8 Show GitHub Exploit DB Packet Storm
3646 4.3 警告
Network 		EspoCRM EspoCRM EspoCRMにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-33534 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
3647 7.8 重要
Local 		Craig J. Bass (craigjbass) ClearanceKit Craig J. Bass (craigjbass)のClearanceKitにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-33632 2026-04-23 10:13 2026-03-26 Show GitHub Exploit DB Packet Storm
3648 5.4 警告
Network 		EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-116
CWE-80
CVE-2026-33657 2026-04-23 10:13 2026-04-13 Show GitHub Exploit DB Packet Storm
3649 3.1 低
Network 		EspoCRM EspoCRM EspoCRMにおける複数の脆弱性 CWE-367
CWE-918
CVE-2026-33659 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
3650 5.4 警告
Network 		EspoCRM EspoCRM EspoCRMにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-33740 2026-04-23 10:12 2026-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351871 - phpwebgallery phpwebgallery isadmin.php in PhpWebGallery 1.0 allows remote attackers to gain administrative access via by setting the photo_login cookie to pseudo. NVD-CWE-Other
CVE-2002-2064 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351872 - webcalendar webcalendar WebCalendar 0.9.34 and earlier with 'browsing in includes directory' enabled allows remote attackers to read arbitrary include files with .inc extensions from the web root. NVD-CWE-Other
CVE-2002-2065 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351873 - compaq tru64 Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in (1) telnet, (2) FTP, (3) ypbind, (4) rpc.lockd, (5) snmp, (6) ttdbserverd, and possibly other services via a TCP SYN scan, a… NVD-CWE-Other
CVE-2002-2071 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351874 - sun jre java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged… NVD-CWE-Other
CVE-2002-2072 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351875 - erwin_lansing mailidx SQL injection vulnerability in Mailidx before 20020105 allows remote attackers to execute arbitrary SQL commands via the search web page. NVD-CWE-Other
CVE-2002-2074 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351876 - mirabilis icq ICQ 2001a and 2002b allows remote attackers to cause a denial of service (memory consumption and hang) via a contact message with a large contacts number. NVD-CWE-Other
CVE-2002-2075 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351877 - summit_computer_networks lil_http Directory traversal vulnerability in Lil' HTTP server 2.1 and 2.2 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request. NVD-CWE-Other
CVE-2002-2076 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351878 - floosietek ftgateoffice
ftgatepro 		Heap-based buffer overflow in Floositek (1) FTGate Pro 1.05 and (2) FTGate Office 1.05 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long POP3 APOP US… NVD-CWE-Other
CVE-2002-2078 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351879 - mosix_project
openmosix_project 		mosix
openmosix 		mosix-protocol-stack in Multicomputer Operating System for UnIX (MOSIX) 1.5.7 allows remote attackers to cause a denial of service via malformed packets. NVD-CWE-Other
CVE-2002-2079 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm
351880 - floosietek ftgatepro Floositek FTGate PRO 1.05 allows remote attackers to cause a denial of service (memory and CPU consumption) via a large number of RCPT TO: messages during an SMTP session. NVD-CWE-Other
CVE-2002-2080 2008-09-6 05:32 2002-12-31 Show GitHub Exploit DB Packet Storm