Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4381 7.3 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6753 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4382 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6754 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4383 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-6755 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4384 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-6756 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4385 6.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないポインタのアクセスに関する脆弱性 CWE-824
初期化されていないポインタのアクセス 		CVE-2026-6757 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4386 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6758 2026-04-24 11:40 2026-04-21 Show GitHub Exploit DB Packet Storm
4387 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6759 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4388 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6760 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4389 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-6761 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
4390 6.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-6762 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348381 - headlight_software mygetright Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data. NVD-CWE-Other
CVE-2001-0605 2016-10-18 11:11 2001-08-22 Show GitHub Exploit DB Packet Storm
348382 - cisco
iss
snort
enterasys 		catalyst_6000_intrusion_detection_system_module
secure_intrusion_detection_system
realsecure_network_sensor
realsecure_server_sensor
snort
dragon 		Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8… NVD-CWE-Other
CVE-2001-0669 2016-10-18 11:11 2001-10-30 Show GitHub Exploit DB Packet Storm
348383 - virtualcart virtualcatalog CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter. NVD-CWE-Other
CVE-2001-0756 2016-10-18 11:11 2001-10-18 Show GitHub Exploit DB Packet Storm
348384 - aol aol_server Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack. NVD-CWE-Other
CVE-2001-0205 2016-10-18 11:10 2001-05-3 Show GitHub Exploit DB Packet Storm
348385 - fastream ftp\+\+_server FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command. NVD-CWE-Other
CVE-2001-0254 2016-10-18 11:10 2001-06-2 Show GitHub Exploit DB Packet Storm
348386 - working_resources_inc. badblue Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request. NVD-CWE-Other
CVE-2001-0277 2016-10-18 11:10 2001-05-3 Show GitHub Exploit DB Packet Storm
348387 - jarle_aase war_ftpd Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command. NVD-CWE-Other
CVE-2001-0295 2016-10-18 11:10 2001-05-3 Show GitHub Exploit DB Packet Storm
348388 - caucho_technology resin Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request. NVD-CWE-Other
CVE-2001-0304 2016-10-18 11:10 2001-05-3 Show GitHub Exploit DB Packet Storm
348389 - novell groupwise Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. NVD-CWE-Other
CVE-2001-0355 2016-10-18 11:10 2001-06-27 Show GitHub Exploit DB Packet Storm
348390 - mirabilis icq Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters. NVD-CWE-Other
CVE-2001-0367 2016-10-18 11:10 2001-06-27 Show GitHub Exploit DB Packet Storm