Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4301 7.1 重要
Local 		Vim Vim Vimにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35177 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4302 7.7 重要
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35187 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4303 7.5 重要
Network 		saleor saleor saleorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-35401 2026-04-21 10:46 2026-04-8 Show GitHub Exploit DB Packet Storm
4304 9.3 緊急
Network 		Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-346
CWE-693
CVE-2026-35408 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4305 7.7 重要
Network 		Monospace Inc Directus Monospace IncのDirectusにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35409 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4306 6.1 警告
Network 		Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-184
CWE-601
CVE-2026-35410 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4307 4.3 警告
Network 		Monospace Inc Directus Monospace IncのDirectusにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-35411 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4308 8.1 重要
Network 		Monospace Inc Directus Monospace IncのDirectusにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-35412 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4309 5.3 警告
Network 		Monospace Inc Directus Monospace IncのDirectusにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-35413 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
4310 6.5 警告
Network 		Monospace Inc Directus Monospace IncのDirectusにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-35441 2026-04-21 10:46 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349911 - com2001 alexis_server Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which … NVD-CWE-Other
CVE-2001-1254 2008-09-11 04:10 2001-09-27 Show GitHub Exploit DB Packet Storm
349912 - zope zope Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags. NVD-CWE-Other
CVE-2001-1278 2008-09-11 04:10 2001-10-10 Show GitHub Exploit DB Packet Storm
349913 - lbl tcpdump Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that tri… NVD-CWE-Other
CVE-2001-1279 2008-09-11 04:10 2001-07-17 Show GitHub Exploit DB Packet Storm
349914 - ipswitch imail POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system. NVD-CWE-Other
CVE-2001-1280 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349915 - ipswitch imail Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" we… NVD-CWE-Other
CVE-2001-1281 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349916 - ipswitch imail Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information. NVD-CWE-Other
CVE-2001-1282 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349917 - ipswitch imail The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other ch… NVD-CWE-Other
CVE-2001-1283 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349918 - ipswitch imail Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users. NVD-CWE-Other
CVE-2001-1284 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349919 - ipswitch imail Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter. NVD-CWE-Other
CVE-2001-1285 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm
349920 - ipswitch imail Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be … NVD-CWE-Other
CVE-2001-1286 2008-09-11 04:10 2001-10-12 Show GitHub Exploit DB Packet Storm