Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3811	9.8	緊急 Network	franklioxygen	MyTube	franklioxygenのMyTubeにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-23837	2026-02-4 18:40	2026-01-19	Show	GitHub Exploit DB Packet Storm

3812	5.3	警告 Network	franklioxygen	MyTube	franklioxygenのMyTubeにおけるセキュリティ決定の信頼できない入力への依存に関する脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-23848	2026-02-4 18:40	2026-01-19	Show	GitHub Exploit DB Packet Storm

3813	9.8	緊急 Network	Arcane	Arcane	Arcaneにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-23944	2026-02-4 18:40	2026-01-19	Show	GitHub Exploit DB Packet Storm

3814	5.5	警告 Local	Copier	Copier	CopierにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-23968	2026-02-4 18:40	2026-01-21	Show	GitHub Exploit DB Packet Storm

3815	7.1	重要 Local	Copier	Copier	CopierにおけるUNIX Symbolic Link のフォローに関する脆弱性	CWE-61 UNIX Symbolic Link のフォロー	CVE-2026-23986	2026-02-4 18:40	2026-01-21	Show	GitHub Exploit DB Packet Storm

3816	6.5	警告 Network	franklioxygen	MyTube	franklioxygenのMyTubeにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-24139	2026-02-4 18:40	2026-01-24	Show	GitHub Exploit DB Packet Storm

3817	5.3	警告 Network	franklioxygen	MyTube	franklioxygenのMyTubeにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性	CWE-915 動的に決定されたオブジェクト属性の不適切に制御された変更	CVE-2026-24140	2026-02-4 18:40	2026-01-24	Show	GitHub Exploit DB Packet Storm

3818	6.1	警告 Network	butor team Ghost Foundation	Ghost Portal	Ghost FoundationのGhost等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-24778	2026-02-4 18:40	2026-01-27	Show	GitHub Exploit DB Packet Storm

3819	5.4	警告 Network	OpenEMR	OpenEMR	OpenEMRにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2021-47817	2026-02-4 18:40	2026-01-21	Show	GitHub Exploit DB Packet Storm

3820	5.4	警告 Network	Commvault Systems, Inc	Commvault	Commvault Systems, IncのCommvaultにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-12776	2026-02-4 18:40	2026-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348501	-	bea	weblogic_server	The Node Manager for BEA WebLogic Express and Server 6.1 through 8.1 SP 1 allows remote attackers to cause a denial of service (Node Manager crash) via malformed data to the Node Manager's port, as d…	NVD-CWE-Other	CVE-2003-1223	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

348502	-	bea	weblogic_server	Weblogic.admin for BEA WebLogic Server and Express 7.0 and 7.0.0.1 displays the JDBCConnectionPoolRuntimeMBean password to the screen in cleartext, which allows attackers to read a user's password by…	NVD-CWE-Other	CVE-2003-1224	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

348503	-	bea	weblogic_server	The default CredentialMapper for BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores passwords in cleartext on disk, which allows local users to extract passwords.	NVD-CWE-Other	CVE-2003-1225	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

348504	-	bea	weblogic_server	BEA WebLogic Server and Express 7.0 and 7.0.0.1 stores certain secrets concerning password encryption insecurely in config.xml, filerealm.properties, and weblogic-rar.xml, which allows local users to…	NVD-CWE-Other	CVE-2003-1226	2008-09-11 04:22	2003-12-31	Show	GitHub Exploit DB Packet Storm

348505	-	cisco	80-7111-01_for_the_unity-svrx255-1a 80-7112-01_for_the_unity-svrx255-2a	Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a "bu…	NVD-CWE-Other	CVE-2003-0983	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

348506	-	cisco	catalyst_6500 catalyst_6500_ws-svc-nam-1 catalyst_6500_ws-svc-nam-2 catalyst_6500_ws-x6380-nam catalyst_7600_ws-svc-nam-1 catalyst_7600_ws-svc-nam-2 catalyst_7600_ws-x6380-nam fi…	Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth reque…	NVD-CWE-Other	CVE-2003-1001	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

348507	-	cisco	catalyst_6500 catalyst_6500_ws-svc-nam-1 catalyst_6500_ws-svc-nam-2 catalyst_6500_ws-x6380-nam catalyst_7600_ws-svc-nam-1 catalyst_7600_ws-svc-nam-2 catalyst_7600_ws-x6380-nam fi…	Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is …	NVD-CWE-Other	CVE-2003-1002	2008-09-11 04:21	2004-01-5	Show	GitHub Exploit DB Packet Storm

348508	-	apple	mac_os_x mac_os_x_server	The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.	NVD-CWE-Other	CVE-2003-1005	2008-09-11 04:21	2003-12-31	Show	GitHub Exploit DB Packet Storm

348509	-	linux	linux_kernel	Integer signedness error in the Linux Socket Filter implementation (filter.c) in Linux 2.4.3-pre3 to 2.4.22-pre10 allows attackers to cause a denial of service (crash).	NVD-CWE-Other	CVE-2003-0643	2008-09-11 04:20	2003-07-25	Show	GitHub Exploit DB Packet Storm

348510	-	trend_micro	damage_cleanup_server housecall	Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long parameter strings.	NVD-CWE-Other	CVE-2003-0646	2008-09-11 04:20	2003-08-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed