Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5271 6.6 警告
Local 		オラクル Oracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI) オラクルのOracle Cloud Native Environment (Oracle CNE) Command Line Interface (CLI)におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-35255 2026-05-8 12:10 2026-05-6 Show GitHub Exploit DB Packet Storm
5272 5.5 警告
Local 		ikea DIRIGERA Firmware ikeaのDIRIGERA Firmwareにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-3588 2026-05-8 12:10 2026-03-9 Show GitHub Exploit DB Packet Storm
5273 10 緊急
Network 		Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避 		CVE-2026-39906 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
5274 10 緊急
Network 		Unisys WebPerfect Image Suite UnisysのWebPerfect Image Suiteにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-39907 2026-05-8 12:10 2026-04-14 Show GitHub Exploit DB Packet Storm
5275 7.5 重要
Network 		ZTE ZXESM iEMS ZTEのZXESM iEMSにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2026-40436 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
5276 7.5 重要
Network 		MIYAGAWA (Tatsuhiko Miyagawa) Starman MIYAGAWA (Tatsuhiko Miyagawa)のStarmanにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-40560 2026-05-8 12:10 2026-04-29 Show GitHub Exploit DB Packet Storm
5277 5.3 警告
Network 		Kazuho Oku (kazuho) Starlet Kazuho Oku (kazuho)のStarletにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-40561 2026-05-8 12:10 2026-05-3 Show GitHub Exploit DB Packet Storm
5278 7.5 重要
Network 		NERDVANA (Michael Conrad) Crypt-SecretBuffer NERDVANA (Michael Conrad)のCrypt-SecretBufferにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-5086 2026-05-8 12:10 2026-04-13 Show GitHub Exploit DB Packet Storm
5279 7.5 重要
Network 		JDEGUEST (Jacques Deguest) Apache::API::Password JDEGUEST (Jacques Deguest)のApache::API::Passwordにおける暗号の脆弱な PRNG の使用に関する脆弱性 CWE-338
暗号における脆弱な PRNG の使用 		CVE-2026-5088 2026-05-8 12:09 2026-04-15 Show GitHub Exploit DB Packet Storm
5280 8.8 重要
Network 		Cerberus, LLC Cerberus FTP Server CerberusのCerberus FTP Serverにおける安全に保持されない継承されたパーミッションに関する脆弱性 CWE-278
安全に保持されない継承されたパーミッション 		CVE-2026-6265 2026-05-8 12:09 2026-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346331 - hp hp-ux Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. NVD-CWE-Other
CVE-2001-1182 2017-10-11 10:29 2001-07-17 Show GitHub Exploit DB Packet Storm
346332 - hp hp-ux RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option. NVD-CWE-Other
CVE-2001-1198 2017-10-11 10:29 2001-12-15 Show GitHub Exploit DB Packet Storm
346333 - hp hp-ux geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges. NVD-CWE-Other
CVE-2001-1509 2017-10-11 10:29 2001-12-31 Show GitHub Exploit DB Packet Storm
346334 - apple quicktime Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header. NVD-CWE-Other
CVE-2002-0252 2017-10-11 10:29 2002-05-29 Show GitHub Exploit DB Packet Storm
346335 - hp hp-ux The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges. NVD-CWE-Other
CVE-2002-0279 2017-10-11 10:29 2002-05-31 Show GitHub Exploit DB Packet Storm
346336 - hp hp-ux Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service. NVD-CWE-Other
CVE-2002-0577 2017-10-11 10:29 2002-06-18 Show GitHub Exploit DB Packet Storm
346337 - hp hp-ux Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service. NVD-CWE-Other
CVE-2002-0585 2017-10-11 10:29 2002-06-18 Show GitHub Exploit DB Packet Storm
346338 - hp hp-ux Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of… NVD-CWE-Other
CVE-2002-0798 2017-10-11 10:29 2002-08-12 Show GitHub Exploit DB Packet Storm
346339 - cisco
fissh
intersoft
netcomposite
pragma_systems
putty
winscp 		ios
ssh_client
securenetterm
shellguard_ssh
secureshell
putty
winscp 		Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute a… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2002-1357 2017-10-11 10:29 2002-12-23 Show GitHub Exploit DB Packet Storm
346340 - cisco
fissh
intersoft
netcomposite
pragma_systems
putty
winscp 		ios
ssh_client
securenetterm
shellguard_ssh
secureshell
putty
winscp 		Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as dem… CWE-20
 Improper Input Validation  		CVE-2002-1358 2017-10-11 10:29 2002-12-23 Show GitHub Exploit DB Packet Storm