Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4691 7.4 重要
Network
Eaton Intelligent Power Protector EatonのIntelligent Power ProtectorにおけるHTTPS セッション内の Secure 属性がない重要な Cookie に関する脆弱性 CWE-614
HTTPS セッション内の Secure 属性がない重要な Cookie
CVE-2026-22617 2026-04-24 11:33 2026-04-16 Show GitHub Exploit DB Packet Storm
4692 7.1 重要
Network
Eaton Intelligent Power Protector EatonのIntelligent Power Protectorにおけるセキュリティチェックに関する脆弱性 CWE-358
不適切に実装されたセキュリティチェック
CVE-2026-22618 2026-04-24 11:33 2026-04-16 Show GitHub Exploit DB Packet Storm
4693 9.9 緊急
Network
Eaton Intelligent Power Protector EatonのIntelligent Power Protectorにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-22619 2026-04-24 11:33 2026-04-16 Show GitHub Exploit DB Packet Storm
4694 8.1 重要
Network
VMware Spring Boot VMwareのSpring Bootにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避
CVE-2026-22733 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4695 2.6
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるリソースのロックに関する脆弱性 CWE-667
不適切なロック
CVE-2026-22735 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4696 5.9 警告
Network
VMware Spring Framework VMwareのSpring Frameworkにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-22737 2026-04-24 11:33 2026-03-20 Show GitHub Exploit DB Packet Storm
4697 7.2 重要
Network
デル PowerProtect DP Series Appliance
data domain operating system
デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-23774 2026-04-24 11:33 2026-04-20 Show GitHub Exploit DB Packet Storm
4698 8.7 重要
Network
decidim decidim Decidim Free Software AssociationのDecidimにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-23891 2026-04-24 11:33 2026-04-13 Show GitHub Exploit DB Packet Storm
4699 4.9 警告
Network
OctoberCMS October OctoberCMSのOctoberにおける複数の脆弱性 CWE-200
CWE-94
CVE-2026-25125 2026-04-24 11:33 2026-04-14 Show GitHub Exploit DB Packet Storm
4700 6.7 警告
Network
フォーティネット FortiSandbox
FortiSandbox Cloud
フォーティネットのFortiSandbox等の複数製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-25691 2026-04-24 11:33 2026-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350191 - opera opera Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer … NVD-CWE-noinfo
CWE-200
Information Exposure
CVE-2003-1561 2009-01-29 14:28 2003-12-31 Show GitHub Exploit DB Packet Storm
350192 - bsdi
caldera
redhat
bsd_os
openlinux
linux
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-1999-0002 2009-01-26 14:00 1998-10-12 Show GitHub Exploit DB Packet Storm
350193 - clam_anti-virus clamav The Quantum archive decompressor in Clam AntiVirus (ClamAV) before 0.86.1 allows remote attackers to cause a denial of service (application crash) via a crafted Quantum archive. NVD-CWE-Other
CVE-2005-2056 2008-11-15 14:48 2005-06-29 Show GitHub Exploit DB Packet Storm
350194 - ipswitch ipswitch_collaboration_suite The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, … NVD-CWE-Other
CVE-2005-1249 2008-11-15 14:46 2005-05-25 Show GitHub Exploit DB Packet Storm
350195 - ipswitch imail
imail_server
Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" … NVD-CWE-Other
CVE-2005-1252 2008-11-15 14:46 2005-05-25 Show GitHub Exploit DB Packet Storm
350196 - ipswitch imail Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service (c… NVD-CWE-Other
CVE-2005-1254 2008-11-15 14:46 2005-05-25 Show GitHub Exploit DB Packet Storm
350197 - ipswitch imail
imail_server
ipswitch_collaboration_suite
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to e… NVD-CWE-Other
CVE-2005-1255 2008-11-15 14:46 2005-05-25 Show GitHub Exploit DB Packet Storm
350198 - ipswitch imail
imail_server
ipswitch_collaboration_suite
Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated user… NVD-CWE-Other
CVE-2005-1256 2008-11-15 14:46 2005-05-25 Show GitHub Exploit DB Packet Storm
350199 - debian ppxp ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands. NVD-CWE-Other
CVE-2005-0392 2008-11-15 14:43 2005-05-19 Show GitHub Exploit DB Packet Storm
350200 - cybozu collaborex
cybozu_ag
cybozu_pocket
garoon_1
mailwise
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read… NVD-CWE-Other
CVE-2006-4491 2008-11-11 15:28 2006-09-1 Show GitHub Exploit DB Packet Storm