Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4121	7.2	重要 Network	LibreNMS	LibreNMS	LibreNMSにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-6204	2026-04-24 11:35	2026-04-13	Show	GitHub Exploit DB Packet Storm

4122	10	緊急 Network	ATRODO (Jon Gentle)	Net::Dropbear	ATRODO (Jon Gentle)のNet::Dropbearにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2016-6129 CVE-2018-12437 CVE-2025-15638	2026-04-24 11:35	2026-04-21	Show	GitHub Exploit DB Packet Storm

4123	9.8	緊急 Network	The Perl Foundation	Perl	The Perl FoundationのPerlにおける不特定の脆弱性	CWE-Other その他	CVE-2026-3381 CVE-2026-4176	2026-04-24 11:35	2026-03-29	Show	GitHub Exploit DB Packet Storm

4124	5.3	警告 Network	Tokuhiro Matsuno (tokuhirom)	Amon2::Plugin::Web::CSRFDefender	Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性	CWE-338 CWE-340	CVE-2025-15604 CVE-2026-5082	2026-04-24 11:35	2026-04-8	Show	GitHub Exploit DB Packet Storm

4125	7.5	重要 Network	pyLoad	pyLoad	pyLoadにおける複数の脆弱性	CWE-502 CWE-863	CVE-2026-33509 CVE-2026-35464	2026-04-24 11:35	2026-04-7	Show	GitHub Exploit DB Packet Storm

4126	9.8	緊急 Network	Tomas Varaneckas	JAD Java Decompiler	Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2016-20049	2026-04-24 11:35	2026-03-28	Show	GitHub Exploit DB Packet Storm

4127	6.1	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-10242	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

4128	9.1	緊急 Network	WSO2	Identity Server as Key Manager WSO2 API Manager WSO2 Identity Server WSO2 Open Banking AM WSO2 Open Banking IAM	WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-2374	2026-04-24 11:35	2026-04-16	Show	GitHub Exploit DB Packet Storm

4129	5.4	警告 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2024-4867	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

4130	7.5	重要 Network	WSO2	WSO2 API Manager	WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性	CWE-611 XML 外部エンティティ参照の不適切な制限	CVE-2024-8010	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347901	-	activestate	activepython	ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attacke…	NVD-CWE-Other	CVE-2002-0131	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347902	-	avirt	avirt_gateway avirt_gateway_suite avirt_soho	Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string …	NVD-CWE-Other	CVE-2002-0133	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347903	-	avirt	avirt_gateway_suite	Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitra…	NVD-CWE-Other	CVE-2002-0134	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347904	-	andreas_mueller	cdrdao	CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.	NVD-CWE-Other	CVE-2002-0137	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347905	-	andreas_mueller	cdrdao	CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.	NVD-CWE-Other	CVE-2002-0138	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347906	-	pi3	pi3web	CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long an…	NVD-CWE-Other	CVE-2002-0142	2016-10-18 11:16	2002-03-25	Show	GitHub Exploit DB Packet Storm

347907	-	cisco	secure_access_control_server	Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash…	CWE-134 Use of Externally-Controlled Format String	CVE-2002-0159	2016-10-18 11:16	2002-04-22	Show	GitHub Exploit DB Packet Storm

347908	-	cisco	secure_access_control_server	The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image fil…	NVD-CWE-Other	CVE-2002-0160	2016-10-18 11:16	2002-04-22	Show	GitHub Exploit DB Packet Storm

347909	-	logwatch	logwatch	LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.	NVD-CWE-Other	CVE-2002-0162	2016-10-18 11:16	2002-03-27	Show	GitHub Exploit DB Packet Storm

347910	-	squid	squid	Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary …	NVD-CWE-Other	CVE-2002-0163	2016-10-18 11:16	2002-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed