Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4841 5 警告
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35248 2026-04-24 11:43 2026-04-21 Show GitHub Exploit DB Packet Storm
4842 3.2 低
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35249 2026-04-24 11:43 2026-04-21 Show GitHub Exploit DB Packet Storm
4843 2.3 低
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35250 2026-04-24 11:43 2026-04-21 Show GitHub Exploit DB Packet Storm
4844 7.5 重要
Local 		オラクル Oracle VM VirtualBox オラクルのOracle VM VirtualBoxにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35251 2026-04-24 11:43 2026-04-21 Show GitHub Exploit DB Packet Storm
4845 5.3 警告
Network 		WWBN AVideo WWBNのAVideoにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-35449 2026-04-24 11:42 2026-04-6 Show GitHub Exploit DB Packet Storm
4846 8.7 重要
Network 		Apostrophe Technologies ApostropheCMS Apostrophe TechnologiesのApostropheCMSにおける複数の脆弱性 CWE-116
CWE-79
CVE-2026-35569 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
4847 6.3 警告
Local 		Glances project Glances Nicolas Hennion (nicolargo)のGlancesにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-35588 2026-04-24 11:42 2026-04-21 Show GitHub Exploit DB Packet Storm
4848 7.3 重要
Local 		Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける信頼できない検索パスに関する脆弱性 CWE-426
信頼性のない検索パス 		CVE-2026-35603 2026-04-24 11:42 2026-04-17 Show GitHub Exploit DB Packet Storm
4849 6.5 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost ServerにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-3590 2026-04-24 11:42 2026-04-15 Show GitHub Exploit DB Packet Storm
4850 6.5 警告
Network 		WWBN AVideo WWBNのAVideoにおけるデータの信頼性についての不十分な検証に関する脆弱性 CWE-345
データの信頼性についての不十分な検証 		CVE-2026-39366 2026-04-24 11:42 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350541 - yahoo messenger Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information. NVD-CWE-Other
CVE-2002-1664 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350542 - yahoo messenger Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field. NVD-CWE-Other
CVE-2002-1665 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350543 - ibm http_server IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non… NVD-CWE-Other
CVE-2002-1822 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350544 - openbb openbb Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters. NVD-CWE-Other
CVE-2002-1830 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350545 - bizdesign imagefolio The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph… NVD-CWE-Other
CVE-2002-1867 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350546 - qnx rtos /bin/su in QNX realtime operating system (RTOS) 4.25 and 6.1.0 allows local users to obtain sensitive information from core dump files by sending the SIGSERV (invalid memory reference) signal. NVD-CWE-Other
CVE-2002-2039 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350547 - michael_baumer pfinger Buffer overflow in PFinger 0.7.8 client allows remote attackers to execute arbitrary code via a long query value passed to the (1) finger program, (2) -l, (3) -d, and (4) -t options. NOTE: if PFinge… NVD-CWE-Other
CVE-2002-2048 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350548 - teekai teekai_forum TeeKai Forum 1.2 allows remote attackers to authenticate as the administrator and and gain privileged web forum access by setting the valid_level cookie to admin. NVD-CWE-Other
CVE-2002-2054 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350549 - teekai teekai_tracking_online Cross-site scripting (XSS) vulnerability in userlog.php in TeeKai Tracking Online 1.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NVD-CWE-Other
CVE-2002-2055 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm
350550 - teekai teekai_forum Cross-site scripting (XSS) vulnerability in TeeKai Forum 1.2 allows remote attackers to inject arbitrary web script or HTML via the valid_username_online cookie. NVD-CWE-Other
CVE-2002-2056 2016-10-18 11:27 2002-12-31 Show GitHub Exploit DB Packet Storm