Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4391 5.3 警告
Network
oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-35483 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
4392 8.8 重要
Local
NSA Emissary NSAのEmissaryにおける複数の脆弱性 CWE-116
CWE-78
CVE-2026-35582 2026-04-27 10:49 2026-04-18 Show GitHub Exploit DB Packet Storm
4393 6.5 警告
Network
Vikunja Vikunja Vikunjaにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-35594 2026-04-27 10:48 2026-04-10 Show GitHub Exploit DB Packet Storm
4394 5.3 警告
Network
レッドハット build of keycloak レッドハットのbuild of keycloakにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-37977 2026-04-27 10:48 2026-04-6 Show GitHub Exploit DB Packet Storm
4395 7.5 重要
Network
Signal K Signal K Server Signal KのSignal K Serverにおける複数の脆弱性 CWE-1333
CWE-400
CVE-2026-39320 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
4396 5.4 警告
Network
opensourcepos open source point of sale opensourceposのopen source point of saleにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-39380 2026-04-27 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
4397 7.6 重要
Network
FreeScout FreeScout FreeScoutにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-39384 2026-04-27 10:48 2026-04-7 Show GitHub Exploit DB Packet Storm
4398 3.1
Network
OpenBao OpenBao OpenBaoにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-39388 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
4399 4.9 警告
Network
OpenBao OpenBao OpenBaoにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-39946 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
4400 5.7 警告
Adjacent
OpenClaw OpenClaw OpenClawにおける重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信
CVE-2026-40045 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347841 - cdrtools cdrtools rscsi in cdrtools 2.01 and earlier allows local users to overwrite arbitrary files and gain root privileges by specifying the target file as a command line argument, which is modified while rscsi is … NVD-CWE-Other
CVE-2003-0655 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347842 - eroaster eroaster eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile. NVD-CWE-Other
CVE-2003-0656 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347843 - sun iplanet_directory_server
one_directory_server
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences. NVD-CWE-Other
CVE-2003-0676 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347844 - netris netris Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response. NVD-CWE-Other
CVE-2003-0685 2016-10-18 11:36 2003-08-27 Show GitHub Exploit DB Packet Storm
347845 - horde horde Horde before 2.2.4 allows remote malicious web sites to steal session IDs and read or create arbitrary email by stealing the ID from a referrer URL. NVD-CWE-Other
CVE-2003-0728 2016-10-18 11:36 2003-10-20 Show GitHub Exploit DB Packet Storm
347846 - tellurian tftpdnt Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename. NVD-CWE-Other
CVE-2003-0729 2016-10-18 11:36 2003-10-20 Show GitHub Exploit DB Packet Storm
347847 - xfree86_project
netbsd
x11r6
netbsd
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflo… NVD-CWE-Other
CVE-2003-0730 2016-10-18 11:36 2003-10-20 Show GitHub Exploit DB Packet Storm
347848 - phpwebsite phpwebsite SQL injection vulnerability in the Calendar module of phpWebSite 0.9.x and earlier allows remote attackers to execute arbitrary SQL queries, as demonstrated using the year parameter. NVD-CWE-Other
CVE-2003-0735 2016-10-18 11:36 2003-10-20 Show GitHub Exploit DB Packet Storm
347849 - phpsysinfo phpsysinfo Directory traversal vulnerability in phpSysInfo 2.1 and earlier allows attackers with write access to a local directory to read arbitrary files as the PHP user or cause a denial of service via .. (do… NVD-CWE-Other
CVE-2003-0536 2016-10-18 11:35 2003-08-18 Show GitHub Exploit DB Packet Storm
347850 - netscape navigator Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename. NVD-CWE-Other
CVE-2003-0553 2016-10-18 11:35 2003-08-18 Show GitHub Exploit DB Packet Storm