Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4371	9.8	緊急 Network	Phpscriptsmall	Ask Expert Script	PhpscriptsmallのAsk Expert Scriptにおける複数の脆弱性	CWE-79 CWE-89	CVE-2019-25676	2026-04-21 10:43	2026-04-5	Show	GitHub Exploit DB Packet Storm

4372	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における安全でない継承されたパーミッションに関する脆弱性	CWE-277 安全でない継承されたパーミッション	CVE-2025-32092	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

4373	6.7	警告 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-32453	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

4374	2.8	低 Local	インテル	Intel Graphics Software インテルグラフィックス・ドライバー Linux Intel LTS Kernel	インテルのインテルグラフィックス・ドライバー等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2025-32739	2026-04-21 10:43	2026-02-10	Show	GitHub Exploit DB Packet Storm

4375	9.1	緊急 Network	Grafana Labs	Grafana Pyroscope	Grafana LabsのGrafana Pyroscopeにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2025-41118	2026-04-21 10:43	2026-04-15	Show	GitHub Exploit DB Packet Storm

4376	6.1	警告 Network	Hind	Leaflet	Leafletにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-69993	2026-04-21 10:43	2026-04-14	Show	GitHub Exploit DB Packet Storm

4377	8.8	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-23776	2026-04-21 10:43	2026-04-17	Show	GitHub Exploit DB Packet Storm

4378	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23778	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

4379	6.7	警告 Local	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-23779	2026-04-21 10:42	2026-04-17	Show	GitHub Exploit DB Packet Storm

4380	4.3	警告 Network	Apache Software Foundation	Apache ActiveMQ ActiveMQ Web ActiveMQ Broker	Apache Software FoundationのApache ActiveMQ等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33227	2026-04-21 10:42	2026-04-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349701	-	phpmyadmin	phpmyadmin	phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in t…	NVD-CWE-Other	CVE-2001-1060	2009-04-3 13:00	2001-07-31	Show	GitHub Exploit DB Packet Storm

349702	-	darren_reed	ipfilter	IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that co…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-1978	2009-04-3 13:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

349703	-	watchguard	legacy_rssa soho vclass	WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argume…	CWE-20 Improper Input Validation	CVE-2002-1979	2009-04-3 13:00	2002-12-31	Show	GitHub Exploit DB Packet Storm

349704	-	zipgenius	zipgenius	Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2005-3317	2009-03-25 13:00	2005-10-27	Show	GitHub Exploit DB Packet Storm

349705	-	openbsd	openssh	sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt wi…	CWE-16 Configuration	CVE-2004-2760	2009-01-29 14:37	2004-12-31	Show	GitHub Exploit DB Packet Storm

349706	-	netscape	navigator	Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.	CWE-200 Information Exposure	CVE-2003-1560	2009-01-29 14:28	2003-12-31	Show	GitHub Exploit DB Packet Storm

349707	-	opera	opera	Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer …	NVD-CWE-noinfo CWE-200 Information Exposure	CVE-2003-1561	2009-01-29 14:28	2003-12-31	Show	GitHub Exploit DB Packet Storm

349708	-	bsdi caldera redhat	bsd_os openlinux linux	Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-1999-0002	2009-01-26 14:00	1998-10-12	Show	GitHub Exploit DB Packet Storm

349709	-	clam_anti-virus	clamav	The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive.	NVD-CWE-Other	CVE-2005-2056	2008-11-15 14:48	2005-06-29	Show	GitHub Exploit DB Packet Storm

349710	-	ipswitch	ipswitch_collaboration_suite	The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, …	NVD-CWE-Other	CVE-2005-1249	2008-11-15 14:46	2005-05-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed