Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5281 9.1 緊急
Network
nearform fast-jwt nearformのfast-jwtにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2026-34950 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5282 4.3 警告
Network
Plunk Plunk PlunkにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション
CVE-2026-34975 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5283 10 緊急
Network
dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5284 8.2 重要
Local
Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5285 6.5 警告
Network
external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5286 8.1 重要
Network
jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5287 9.1 緊急
Network
jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
5288 9 緊急
Network
Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
5289 7.2 重要
Network
Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
5290 9.1 緊急
Network
nearform fast-jwt nearformのfast-jwtにおける複数の脆弱性 CWE-1289
CWE-345
CWE-706
CVE-2026-35039 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350681 - ibm visualage_for_java Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting e… NVD-CWE-Other
CVE-2001-1441 2017-07-11 10:29 2001-07-2 Show GitHub Exploit DB Packet Storm
350682 - isc inn Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument. NVD-CWE-Other
CVE-2001-1442 2017-07-11 10:29 2001-04-21 Show GitHub Exploit DB Packet Storm
350683 - isc inn INN 2.3.0 fixes problem. NVD-CWE-Other
CVE-2001-1442 2017-07-11 10:29 2001-04-21 Show GitHub Exploit DB Packet Storm
350684 - kth kth_kerberos KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications vi… NVD-CWE-Other
CVE-2001-1443 2017-07-11 10:29 2001-08-27 Show GitHub Exploit DB Packet Storm
350685 - kth kth_kerberos The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to… NVD-CWE-Other
CVE-2001-1444 2017-07-11 10:29 2001-08-27 Show GitHub Exploit DB Packet Storm
350686 - lotus domino_mail_server Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands. NVD-CWE-Other
CVE-2001-1445 2017-07-11 10:29 2001-03-1 Show GitHub Exploit DB Packet Storm
350687 - lotus domino_mail_server Upgrade to R5.0.8 to resolve the problem. NVD-CWE-Other
CVE-2001-1445 2017-07-11 10:29 2001-03-1 Show GitHub Exploit DB Packet Storm
350688 - apple mac_os_x Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible d… NVD-CWE-Other
CVE-2001-1446 2017-07-11 10:29 2001-09-11 Show GitHub Exploit DB Packet Storm
350689 - apple mac_os_x It is reported that this issue is addressed in the Apple Mac OS X and Mac OS X Server release versions 10.2 and above. This is not confirmed. NVD-CWE-Other
CVE-2001-1446 2017-07-11 10:29 2001-09-11 Show GitHub Exploit DB Packet Storm
350690 - apple mac_os_x NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications … NVD-CWE-Other
CVE-2001-1447 2017-07-11 10:29 2001-10-17 Show GitHub Exploit DB Packet Storm