Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4161 8.1 重要
Network 		VMware Spring Boot VMwareのSpring Bootにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-22733 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4162 2.6 低
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック 		CVE-2026-22735 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4163 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-22737 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4164 7.2 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-23774 2026-04-24 11:33 2026-04-20 Show GitHub Exploit DB Packet Storm
4165 8.7 重要
Network 		decidim decidim Decidim Free Software AssociationのDecidimにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23891 2026-04-24 11:33 2026-04-13 Show GitHub Exploit DB Packet Storm
4166 4.9 警告
Network 		OctoberCMS October OctoberCMSのOctoberにおける複数の脆弱性 CWE-200
CWE-94
CVE-2026-25125 2026-04-24 11:33 2026-04-14 Show GitHub Exploit DB Packet Storm
4167 6.7 警告
Network 		フォーティネット FortiSandbox
FortiSandbox Cloud 		フォーティネットのFortiSandbox等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-25691 2026-04-24 11:33 2026-04-14 Show GitHub Exploit DB Packet Storm
4168 6.1 警告
Local 		Zulip Zulip Zulipにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-26058 2026-04-24 11:33 2026-04-3 Show GitHub Exploit DB Packet Storm
4169 8.8 重要
Network 		デル PowerProtect DP Series Appliance
data domain operating system 		デルのdata domain operating system等の複数製品における重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-26944 2026-04-24 11:33 2026-04-20 Show GitHub Exploit DB Packet Storm
4170 6.1 警告
Network 		Jeremiah Lowin FastMCP Jeremiah LowinのFastMCPにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-27124 2026-04-24 11:33 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347911 - pgp desktop_security
freeware
personal_security 		Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows rem… NVD-CWE-Other
CVE-2002-0685 2016-10-18 11:21 2002-07-23 Show GitHub Exploit DB Packet Storm
347912 - iplanet iplanet_web_server Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parame… NVD-CWE-Other
CVE-2002-0686 2016-10-18 11:21 2002-07-23 Show GitHub Exploit DB Packet Storm
347913 - freebsd
openbsd 		freebsd
openbsd 		ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive … NVD-CWE-Other
CVE-2002-0701 2016-10-18 11:21 2002-07-23 Show GitHub Exploit DB Packet Storm
347914 - isc dhcpd Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to … NVD-CWE-Other
CVE-2002-0702 2016-10-18 11:21 2002-07-26 Show GitHub Exploit DB Packet Storm
347915 - surfcontrol superscout_web_filter
web_filter 		The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames a… NVD-CWE-Other
CVE-2002-0705 2016-10-18 11:21 2002-10-10 Show GitHub Exploit DB Packet Storm
347916 - surfcontrol superscout_web_filter
web_filter 		UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password us… NVD-CWE-Other
CVE-2002-0706 2016-10-18 11:21 2002-10-10 Show GitHub Exploit DB Packet Storm
347917 - surfcontrol superscout_web_filter
web_filter 		The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow. NVD-CWE-Other
CVE-2002-0707 2016-10-18 11:21 2002-10-10 Show GitHub Exploit DB Packet Storm
347918 - surfcontrol superscout_web_filter
web_filter 		Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequen… NVD-CWE-Other
CVE-2002-0708 2016-10-18 11:21 2002-10-10 Show GitHub Exploit DB Packet Storm
347919 - surfcontrol superscout_web_filter
web_filter 		SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and pos… NVD-CWE-Other
CVE-2002-0709 2016-10-18 11:21 2002-10-10 Show GitHub Exploit DB Packet Storm
347920 - rod_clark sendform.cgi Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter. NVD-CWE-Other
CVE-2002-0710 2016-10-18 11:21 2002-08-12 Show GitHub Exploit DB Packet Storm