Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5011	5.4	警告 Network	WSO2	WSO2 Identity Server	WSO2のWSO2 Identity Serverにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2025-12624	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

5012	8.2	重要 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2025-31958	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5013	5.3	警告 Network	HCL Technologies Limited	HCL BigFix Service Management (SM)	HCL Technologies LimitedのHCL BigFix Service Management (SM)における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2025-31981	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5014	6.1	警告 Network	WSO2	WSO2 API Manager WSO2 Identity Server	WSO2のWSO2 API Manager等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-6024	2026-04-24 11:34	2026-04-16	Show	GitHub Exploit DB Packet Storm

5015	6.5	警告 Network	フォーティネット	FortiOS FortiPAM FortiProxy FortiSwitch Manager	フォーティネットのFortiOS等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-61624	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

5016	5.4	警告 Network	フォーティネット	FortiSandbox FortiSandbox Cloud	フォーティネットのFortiSandbox等の複数製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2025-61886	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

5017	5.3	警告 Network	Apache Software Foundation	Apache Doris-MCP-Server	Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-66335	2026-04-24 11:34	2026-04-20	Show	GitHub Exploit DB Packet Storm

5018	6.5	警告 Network	フォーティネット	FortiManager Cloud FortiAnalyzer FortiAnalyzer Cloud FortiManager	フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-68649	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

5019	8.4	重要 Local	Nitro Software Inc.	Nitro PDF Pro	Nitro Software Inc.のNitro PDF Proにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-69627	2026-04-24 11:34	2026-04-13	Show	GitHub Exploit DB Packet Storm

5020	4.3	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-0971	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350771	-	lbl	tcpdump	Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.	NVD-CWE-Other	CVE-2002-0380	2016-10-18 11:19	2002-06-18	Show	GitHub Exploit DB Packet Storm

350772	-	xchat	xchat	XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.	NVD-CWE-Other	CVE-2002-0382	2016-10-18 11:19	2002-06-25	Show	GitHub Exploit DB Packet Storm

350773	-	opera_software	opera_web_browser	Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attac…	CWE-79 Cross-site Scripting	CVE-2002-0270	2016-10-18 11:18	2002-05-29	Show	GitHub Exploit DB Packet Storm

350774	-	ada_core_technologies	gnat_pro_native	Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2002-0271	2016-10-18 11:18	2002-05-29	Show	GitHub Exploit DB Packet Storm

350775	-	mpg321	mpg321	Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.	NVD-CWE-Other	CVE-2002-0272	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

350776	-	netwin	cwmail	Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.	NVD-CWE-Other	CVE-2002-0273	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

350777	-	university_of_cambridge	exim	Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments.	NVD-CWE-Other	CVE-2002-0274	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

350778	-	ettercap	ettercap	Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets.	NVD-CWE-Other	CVE-2002-0276	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

350779	-	add2it	mailman_free	Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.	NVD-CWE-Other	CVE-2002-0277	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

350780	-	add2it	mailman_free	Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter.	NVD-CWE-Other	CVE-2002-0278	2016-10-18 11:18	2002-05-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed