Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4201 4.8 警告
Network
フォーティネット FortiNAC-F フォーティネットのFortiNAC-Fにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2026-21741 2026-04-21 10:51 2026-04-14 Show GitHub Exploit DB Packet Storm
4202 8.8 重要
Network
AFFiNE AFFiNE AFFiNEにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-21853 2026-04-21 10:51 2026-03-2 Show GitHub Exploit DB Packet Storm
4203 5.7 警告
Network
デル data domain operating system デルのdata domain operating systemにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2026-23775 2026-04-21 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
4204 5.3 警告
Network
PowerDNS PowerDNS Recursor PowerDNSのPowerDNS RecursorにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避
CVE-2026-24027 2026-04-21 10:51 2026-02-9 Show GitHub Exploit DB Packet Storm
4205 6.7 警告
Local
Acronis International GmbH True Image Acronis International GmbHのTrue Imageにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-27774 2026-04-21 10:51 2026-04-2 Show GitHub Exploit DB Packet Storm
4206 5.3 警告
Network
Talishar Talishar Talisharにおける認証に関する脆弱性 CWE-287
不適切な認証
CVE-2026-28428 2026-04-21 10:51 2026-03-6 Show GitHub Exploit DB Packet Storm
4207 7.5 重要
Network
Talishar Talishar Talisharにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-28429 2026-04-21 10:50 2026-03-6 Show GitHub Exploit DB Packet Storm
4208 6.7 警告
Local
Acronis International GmbH True Image Acronis International GmbHのTrue Imageにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-28728 2026-04-21 10:50 2026-04-2 Show GitHub Exploit DB Packet Storm
4209 8.3 重要
Network
Daylight Studio FUEL CMS Daylight StudioのFUEL CMSにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-30461 2026-04-21 10:50 2026-04-15 Show GitHub Exploit DB Packet Storm
4210 8.6 重要
Network
Agent Zero Agent Zero Agent Zeroにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-30624 2026-04-21 10:50 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349091 - stafford.uklinux libesmtp libESMTP, probably 1.0.4 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attack… CWE-310
Cryptographic Issues
CVE-2010-1192 2010-05-22 14:46 2010-04-1 Show GitHub Exploit DB Packet Storm
349092 - stafford.uklinux libesmtp The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attac… CWE-310
Cryptographic Issues
CVE-2010-1194 2010-05-22 14:46 2010-04-1 Show GitHub Exploit DB Packet Storm
349093 - hp insight_control_server_migration_for_windows Multiple cross-site scripting (XSS) vulnerabilities in HP Insight Control Server Migration before 6.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2010-1557 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349094 - cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S11 and 9.7(3)P before 9.7(3)P11 allows remote attackers to cause a denial of service (device crash) via a l… CWE-20
 Improper Input Validation 
CVE-2010-1561 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349095 - cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a mal… CWE-20
 Improper Input Validation 
CVE-2010-1562 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349096 - cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of service (device crash) via a mal… CWE-20
 Improper Input Validation 
CVE-2010-1563 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349097 - cisco pgw_2200_softswitch Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.7(3)S before 9.7(3)S9 and 9.7(3)P before 9.7(3)P9 allows remote attackers to cause a denial of ser… CWE-399
 Resource Management Errors
CVE-2010-1565 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349098 - cisco pgw_2200_softswitch The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.8(1)S5 allows remote attackers to cause a denial of service (device crash) via a malformed header, aka Bug ID CSCsz13590. CWE-20
 Improper Input Validation 
CVE-2010-1567 2010-05-21 14:59 2010-05-15 Show GitHub Exploit DB Packet Storm
349099 - apple mac_os_x
mac_os_x_server
The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group members… CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0512 2010-05-21 14:57 2010-03-31 Show GitHub Exploit DB Packet Storm
349100 - apple mac_os_x
mac_os_x_server
Per: http://support.apple.com/kb/HT4077 'This issue only affects systems configured to use a network account server, and does not affect systems prior to Mac OS X v10.6.' CWE-264
Permissions, Privileges, and Access Controls
CVE-2010-0512 2010-05-21 14:57 2010-03-31 Show GitHub Exploit DB Packet Storm