Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5001 5.3 警告
Network 		Tokuhiro Matsuno (tokuhirom) Amon2::Plugin::Web::CSRFDefender Tokuhiro Matsuno (tokuhirom)のAmon2::Plugin::Web::CSRFDefenderにおける複数の脆弱性 CWE-338
CWE-340
CVE-2025-15604
CVE-2026-5082 		2026-04-24 11:35 2026-04-8 Show GitHub Exploit DB Packet Storm
5002 7.5 重要
Network 		pyLoad pyLoad pyLoadにおける複数の脆弱性 CWE-502
CWE-863
CVE-2026-33509
CVE-2026-35464 		2026-04-24 11:35 2026-04-7 Show GitHub Exploit DB Packet Storm
5003 9.8 緊急
Network 		Tomas Varaneckas JAD Java Decompiler Tomas VaraneckasのJAD Java Decompilerにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2016-20049 2026-04-24 11:35 2026-03-28 Show GitHub Exploit DB Packet Storm
5004 6.1 警告
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-10242 2026-04-24 11:35 2026-04-16 Show GitHub Exploit DB Packet Storm
5005 9.1 緊急
Network 		WSO2 Identity Server as Key Manager
WSO2 API Manager
WSO2 Identity Server
WSO2 Open Banking AM
WSO2 Open Banking IAM 		WSO2のWSO2 API Manager等の複数製品におけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-2374 2026-04-24 11:35 2026-04-16 Show GitHub Exploit DB Packet Storm
5006 5.4 警告
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API Managerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2024-4867 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
5007 7.5 重要
Network 		WSO2 WSO2 API Manager WSO2のWSO2 API ManagerにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限 		CVE-2024-8010 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
5008 5.4 警告
Network 		WSO2 WSO2 Identity Server WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限 		CVE-2025-12624 2026-04-24 11:34 2026-04-16 Show GitHub Exploit DB Packet Storm
5009 8.2 重要
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2025-31958 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
5010 5.3 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性 CWE-319
重要な情報の平文での送信 		CVE-2025-31981 2026-04-24 11:34 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348741 - sgi irix Unknown vulnerability in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, allows attackers to cause a denial of service (memory consumption). NVD-CWE-Other
CVE-2003-0572 2017-07-11 10:29 2003-08-18 Show GitHub Exploit DB Packet Storm
348742 - sgi irix Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUTH_UNIX gid list. NVD-CWE-Other
CVE-2003-0575 2017-07-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
348743 - apple mac_os_x_server Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized … NVD-CWE-Other
CVE-2003-0601 2017-07-11 10:29 2004-03-29 Show GitHub Exploit DB Packet Storm
348744 - stanley_t._shebs xconq Buffer overflow in xconq 7.4.1 allows local users to become part of the "games" group via the (1) USER or (2) DISPLAY environment variables. NVD-CWE-Other
CVE-2003-0607 2017-07-11 10:29 2004-03-29 Show GitHub Exploit DB Packet Storm
348745 - robert_hyatt crafty Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group "games" privileges via long command line arguments to crafty.bin. NVD-CWE-Other
CVE-2003-0612 2017-07-11 10:29 2004-03-29 Show GitHub Exploit DB Packet Storm
348746 - perl
debian 		suidperl
debian_linux 		Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions. NVD-CWE-Other
CVE-2003-0618 2017-07-11 10:29 2004-05-4 Show GitHub Exploit DB Packet Storm
348747 - bea tuxedo
weblogic_server 		The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument. NVD-CWE-Other
CVE-2003-0621 2017-07-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm
348748 - bea tuxedo
weblogic_server 		The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service (hang) via pathname arguments that contain MS-DOS device names such as CON and AUX. NVD-CWE-Other
CVE-2003-0622 2017-07-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm
348749 - bea tuxedo
weblogic_server 		Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to inject arbitrary web script via the INIFILE argument. NVD-CWE-Other
CVE-2003-0623 2017-07-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm
348750 - bea weblogic_server Cross-site scripting (XSS) vulnerability in InteractiveQuery.jsp for BEA WebLogic 8.1 and earlier allows remote attackers to inject malicious web script via the person parameter. CWE-79
Cross-site Scripting 		CVE-2003-0624 2017-07-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm