Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4391	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-6763	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4392	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6764	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4393	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2026-6765	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4394	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-6766	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4395	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6767	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4396	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6768	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4397	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6769	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4398	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-6770	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4399	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6771	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

4400	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-6772	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348231	-	oracle	application_server application_server_web_cache oracle8i oracle9i	PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate …	NVD-CWE-Other	CVE-2002-0564	2016-10-18 11:20	2002-07-3	Show	GitHub Exploit DB Packet Storm

348232	-	oracle	application_server oracle8i oracle9i	Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConf…	NVD-CWE-Other	CVE-2002-0568	2016-10-18 11:20	2002-07-3	Show	GitHub Exploit DB Packet Storm

348233	-	oracle	application_server	Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).	NVD-CWE-Other	CVE-2002-0569	2016-10-18 11:20	2002-07-3	Show	GitHub Exploit DB Packet Storm

348234	-	openbsd	openssh	Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privile…	NVD-CWE-Other	CVE-2002-0575	2016-10-18 11:20	2002-06-18	Show	GitHub Exploit DB Packet Storm

348235	-	snapgear	snapgear_lite\+_firewall	Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500.	NVD-CWE-Other	CVE-2002-0603	2016-10-18 11:20	2002-06-18	Show	GitHub Exploit DB Packet Storm

348236	-	snapgear	snapgear_lite\+_firewall	Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options.	NVD-CWE-Other	CVE-2002-0604	2016-10-18 11:20	2002-06-18	Show	GitHub Exploit DB Packet Storm

348237	-	macromedia	flash_player	Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary code via a long movie parameter.	NVD-CWE-Other	CVE-2002-0605	2016-10-18 11:20	2002-06-18	Show	GitHub Exploit DB Packet Storm

348238	-	mandrakesoft hp redhat	mandrake_single_network_firewall secure_os mandrake_linux mandrake_linux_corporate_server linux	setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow lo…	NVD-CWE-Other	CVE-2002-0638	2016-10-18 11:20	2002-08-12	Show	GitHub Exploit DB Packet Storm

348239	-	gator	gator	Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.	NVD-CWE-Other	CVE-2002-0317	2016-10-18 11:19	2002-06-25	Show	GitHub Exploit DB Packet Storm

348240	-	freeradius	freeradius	FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.	NVD-CWE-Other	CVE-2002-0318	2016-10-18 11:19	2002-06-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed