Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4031 6.5 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34303 2026-04-24 11:29 2026-04-21 Show GitHub Exploit DB Packet Storm
4032 4.9 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34304 2026-04-24 11:29 2026-04-21 Show GitHub Exploit DB Packet Storm
4033 6.5 警告
Network 		オラクル MySQL Server オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34308 2026-04-24 11:29 2026-04-21 Show GitHub Exploit DB Packet Storm
4034 6.5 警告
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-285
CWE-639
CVE-2026-34370 2026-04-24 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
4035 8.1 重要
Network 		nginxui nginx ui Nginx UI TeamのNginx UIにおける WebSocket でのオリジン検証の欠如に関する脆弱性 CWE-1385
WebSocket でのオリジン検証の欠如 		CVE-2026-34403 2026-04-24 11:28 2026-04-20 Show GitHub Exploit DB Packet Storm
4036 3.5 低
Physics 		oauth2_proxy project oauth2_proxy oauth2_proxy projectのoauth2_proxyにおける複数の脆弱性 CWE-384
CWE-613
CVE-2026-34454 2026-04-24 11:28 2026-04-14 Show GitHub Exploit DB Packet Storm
4037 7.5 重要
Network 		Stig (stigtsp) Net::CIDR::Lite Stig (stigtsp)のNet::CIDR::Liteにおける入力の構文的正当性の検証に関する脆弱性 CWE-1286
入力の構文的正当性の不適切な検証 		CVE-2026-40198
CVE-2026-40199 		2026-04-23 17:52 2026-04-10 Show GitHub Exploit DB Packet Storm
4038 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年04月21日） - - 2026-04-23 17:41 2026-04-22 Show GitHub Exploit DB Packet Storm
4039 8.8 重要
Network 		サイレックス・テクノロジー株式会社 SD-330AC
AMC Manager 		サイレックス・テクノロジー製SD-330ACおよびAMC Managerにおける複数の脆弱性 CWE-1188
CWE-121
CWE-122
CWE-1395
CWE-226
CWE-266
CWE-306
CWE-321
CWE-327
CWE-79
CWE-93
CVE-2015-5621
CVE-2024-24487
CVE-2026-32955
CVE-2026-32956
CVE-2026-32957
CVE-2026-32958
CVE-2026-32959
CVE-2026-32960
CVE-2026-32961
CVE-2026-32962
CVE-2026-32963
CV… 		2026-04-23 17:36 2026-04-20 Show GitHub Exploit DB Packet Storm
4040 7.5 重要
Network 		株式会社GROWI GROWI GROWIにおける、正規表現を用いたサービス運用妨害（ReDoS）の脆弱性 CWE-Other
その他 		CVE-2026-41040 2026-04-23 15:16 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348011 - softwin bitdefender Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format str… CWE-134
Use of Externally-Controlled Format String 		CVE-2005-3154 2016-09-30 23:33 2005-10-6 Show GitHub Exploit DB Packet Storm
348012 - cisco ios Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. CWE-200
Information Exposure 		CVE-2000-0368 2016-09-21 22:06 2001-03-12 Show GitHub Exploit DB Packet Storm
348013 - ibm aix Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. NVD-CWE-Other
CVE-2001-1095 2016-09-17 10:59 2001-10-9 Show GitHub Exploit DB Packet Storm
348014 - phpbb_group phpbb db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2002-0473 2016-09-17 10:59 2002-08-12 Show GitHub Exploit DB Packet Storm
348015 - pablo_software_solutions pablo_ftp_server Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. NVD-CWE-Other
CVE-2002-1054 2016-09-17 10:59 2002-10-4 Show GitHub Exploit DB Packet Storm
348016 - sun java Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and av… NVD-CWE-noinfo
CVE-2010-0887 2016-08-23 11:01 2010-04-21 Show GitHub Exploit DB Packet Storm
348017 - php php The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by ca… CWE-200
Information Exposure 		CVE-2010-1860 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348018 - php php The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure 		CVE-2010-1862 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348019 - php php The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an… CWE-200
Information Exposure 		CVE-2010-1864 2016-08-23 11:01 2010-05-8 Show GitHub Exploit DB Packet Storm
348020 - php php The (1) iconv_mime_decode, (2) iconv_substr, and (3) iconv_mime_encode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information (mem… CWE-200
Information Exposure 		CVE-2010-2097 2016-08-23 11:01 2010-05-28 Show GitHub Exploit DB Packet Storm