Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3661	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40858	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3662	9.8	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40860	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3663	7.7	重要 Network	argoproj	Argo Workflows	Argo Project AuthorsのArgo Workflowsにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40886	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3664	5.3	警告 Adjacent	opentelemetry	opentelemetry	opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-40891	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3665	7.8	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40915	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3666	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40916	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3667	7.1	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40917	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3668	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性	CWE-131 正しくないバッファサイズ計算	CVE-2026-40918	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3669	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40919	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3670	5.9	警告 Network	opentelemetry	opentelemetry	opentelemetryにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-41078	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346931	-	delegate	delegate	Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy.	NVD-CWE-Other	CVE-2002-1781	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346932	-	university_of_washington	uw-imap	The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrar…	NVD-CWE-Other	CVE-2002-1782	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346933	-	php	php	CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected…	NVD-CWE-Other	CVE-2002-1783	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346934	-	openbb	openbb	Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror a…	NVD-CWE-Other	CVE-2002-1829	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346935	-	microsoft	data_access_components	Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details …	NVD-CWE-Other	CVE-2002-1918	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346936	-	aquonics_scripting	aquonics_file_manager	Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.	NVD-CWE-Other	CVE-2002-1927	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346937	-	qnx	rtos	The timer implementation in QNX RTOS 6.1.0 allows local users to cause a denial of service (hang) and possibly execute arbitrary code by creating multiple timers with a 1-ms tick.	NVD-CWE-Other	CVE-2002-1983	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346938	-	zonelabs	zonealarm	ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.	NVD-CWE-Other	CVE-2002-1997	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346939	-	xqus	x-stat	x_stat_admin.php in x-stat 2.3 and earlier allows remote attackers to (1) execute PHP commands such as phpinfo or (2) obtain the full path of the web server via an invalid action parameter, which lea…	NVD-CWE-Other	CVE-2002-2045	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

346940	-	squirrelmail	squirrelmail	Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fie…	NVD-CWE-Other	CVE-2002-2086	2017-07-11 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm