Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5281 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2026-34950 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5282 4.3 警告
Network 		Plunk Plunk PlunkにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-34975 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5283 10 緊急
Network 		dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5284 8.2 重要
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5285 6.5 警告
Network 		external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5286 8.1 重要
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5287 9.1 緊急
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
5288 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
5289 7.2 重要
Network 		Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
5290 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける複数の脆弱性 CWE-1289
CWE-345
CWE-706
CVE-2026-35039 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350381 - symantec security_check Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary co… NVD-CWE-Other
CVE-2003-0470 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350382 - sgi irix The IPv6 capability in IRIX 6.5.19 allows remote attackers to cause a denial of service (hang) in inetd via port scanning. NVD-CWE-Other
CVE-2003-0472 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350383 - sgi irix Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications. NVD-CWE-Other
CVE-2003-0473 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350384 - phpbb_group phpbb SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter. NVD-CWE-Other
CVE-2003-0486 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350385 - kerio kerio_mailserver Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subsc… NVD-CWE-Other
CVE-2003-0487 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350386 - kerio kerio_mailserver Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the al… NVD-CWE-Other
CVE-2003-0488 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350387 - snitz_communications snitz_forums_2000 Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter. NVD-CWE-Other
CVE-2003-0492 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350388 - snitz_communications snitz_forums_2000 password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id. NVD-CWE-Other
CVE-2003-0494 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350389 - ledscripts.com lednews Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item. NVD-CWE-Other
CVE-2003-0495 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm
350390 - cyberstrong eshop SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2)… NVD-CWE-Other
CVE-2003-0509 2017-07-11 10:29 2003-08-7 Show GitHub Exploit DB Packet Storm