Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4121	9.8	緊急 Network	Bitwarden	Bitwarden Command-line Interface	BitwardenのBitwarden Command-line Interfaceにおける複数の脆弱性	CWE-78 CWE-94	CVE-2026-42994	2026-05-7 11:31	2026-05-1	Show	GitHub Exploit DB Packet Storm

4122	9.3	緊急 Network	GeoVision	GV-IP Device Utility	GeoVisionのGV-IP Device Utilityにおける隠蔽によるセキュリティへの依存に関する脆弱性	CWE-656 隠蔽によるセキュリティへの依存	CVE-2026-7161	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4123	6.1	警告 Network	GeoVision	GV-LPC2211 Firmware GV-LPC2011 Firmware	GeoVisionのGV-LPC2011 Firmware等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-7371	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4124	9	緊急 Network	GeoVision	GV-VMS Firmware	GeoVisionのGV-VMS Firmwareにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-7372	2026-05-7 11:31	2026-05-4	Show	GitHub Exploit DB Packet Storm

4125	7.8	重要 Local	Zurich Instruments	LabOne Q	Zurich InstrumentsのLabOne Qにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-7584	2026-05-7 11:31	2026-05-1	Show	GitHub Exploit DB Packet Storm

4126	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W308R Firmware	Shenzhen Tenda Technology Co.,Ltd.のW308R Firmwareにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25316	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4127	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	W3002R Firmware A302 Firmware W309R Firmware	Shenzhen Tenda Technology Co.,Ltd.のA302 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25317	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4128	9.8	緊急 Network	Shenzhen Tenda Technology Co.,Ltd.	FH303 Firmware A300 Firmware	Shenzhen Tenda Technology Co.,Ltd.のA300 Firmware等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2018-25318	2026-05-7 11:31	2026-04-29	Show	GitHub Exploit DB Packet Storm

4129	9.8	緊急 Network	DeanWu (pylixm)	Django-mdeditor	DeanWu (pylixm)のDjango-mdeditorにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2025-13030	2026-05-7 11:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

4130	7.8	重要 Local	The Qt Company	qtdeclarative	The Qt Companyのqtdeclarativeにおける複数の脆弱性	CWE-20 CWE-94 CWE-94	CVE-2025-14576	2026-05-7 11:30	2026-04-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354891	-	suse	suse_linux	The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such…	NVD-CWE-Other	CVE-2000-0433	2008-09-11 04:04	2000-05-2	Show	GitHub Exploit DB Packet Storm

354892	-	matthew_redman	allmanage	The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.	NVD-CWE-Other	CVE-2000-0434	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

354893	-	matthew_redman	allmanage	The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.	NVD-CWE-Other	CVE-2000-0435	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

354894	-	metaproducts	offline_explorer	MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0436	2008-09-11 04:04	2000-05-19	Show	GitHub Exploit DB Packet Storm

354895	-	network_associates	gauntlet_firewall webshield webshield_e-ppliance	Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.	NVD-CWE-Other	CVE-2000-0437	2008-09-11 04:04	2000-05-18	Show	GitHub Exploit DB Packet Storm

354896	-	caldera slackware suse turbolinux	openlinux slackware_linux suse_linux turbolinux	Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.	NVD-CWE-Other	CVE-2000-0438	2008-09-11 04:04	2000-05-22	Show	GitHub Exploit DB Packet Storm

354897	-	freebsd netbsd	freebsd netbsd	NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.	NVD-CWE-Other	CVE-2000-0440	2008-09-11 04:04	2000-05-1	Show	GitHub Exploit DB Packet Storm

354898	-	ibm	aix	Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.	NVD-CWE-Other	CVE-2000-0441	2008-09-11 04:04	2000-05-24	Show	GitHub Exploit DB Packet Storm

354899	-	qualcomm sun	qpopper cobalt_raq_2 cobalt_raq_3i	Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command.	NVD-CWE-Other	CVE-2000-0442	2008-09-11 04:04	2000-05-24	Show	GitHub Exploit DB Packet Storm

354900	-	hp	jetadmin	The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0443	2008-09-11 04:04	2000-05-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed