Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5371 8.8 重要
Network
Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-31019 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
5372 3.5
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性 CWE-1021
レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限
CVE-2026-3254 2026-04-27 11:22 2026-04-22 Show GitHub Exploit DB Packet Storm
5373 9.9 緊急
Network
Linux Foundation Spinnaker Linux FoundationのSpinnakerにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認
CVE-2026-32604 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
5374 9.9 緊急
Network
Linux Foundation Spinnaker Linux FoundationのSpinnakerにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-32613 2026-04-27 11:22 2026-04-20 Show GitHub Exploit DB Packet Storm
5375 7.8 重要
Local
Podman project podman Podman projectのpodmanにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-33414 2026-04-27 11:22 2026-04-14 Show GitHub Exploit DB Packet Storm
5376 6.1 警告
Network
オラクル Oracle Identity Manager オラクルのOracle Identity Managerにおける複数の脆弱性 CWE-284
CWE-601
CVE-2026-34283 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
5377 6.1 警告
Network
オラクル Oracle Business Process Management Suite オラクルのOracle Business Process Management Suiteにおける複数の脆弱性 CWE-284
CWE-601
CVE-2026-34284 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
5378 8.7 重要
Network
オラクル Oracle HTTP Server オラクルのOracle HTTP Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34291 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
5379 7.2 重要
Network
オラクル Oracle WebLogic Server オラクルのOracle WebLogic Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34292 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
5380 6.5 警告
Network
オラクル PeopleSoft Enterprise SCM Purchasing オラクルのPeopleSoft Enterprise SCM Purchasingにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-34295 2026-04-27 11:22 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350711 - novell groupwise Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences … NVD-CWE-Other
CVE-2001-1458 2017-07-11 10:29 2001-10-15 Show GitHub Exploit DB Packet Storm
350712 - openbsd openssh OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam… NVD-CWE-Other
CVE-2001-1459 2017-07-11 10:29 2001-06-19 Show GitHub Exploit DB Packet Storm
350713 - postnuke_software_foundation postnuke SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter. NVD-CWE-Other
CVE-2001-1460 2017-07-11 10:29 2001-10-13 Show GitHub Exploit DB Packet Storm
350714 - rsa securid Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1… NVD-CWE-Other
CVE-2001-1461 2017-07-11 10:29 2001-10-22 Show GitHub Exploit DB Packet Storm
350715 - rsa securid WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, whi… NVD-CWE-Other
CVE-2001-1462 2017-07-11 10:29 2001-10-24 Show GitHub Exploit DB Packet Storm
350716 - businessobjects crystal_reports Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to … NVD-CWE-Other
CVE-2001-1464 2017-07-11 10:29 2001-01-10 Show GitHub Exploit DB Packet Storm
350717 - van_dyke_technologies securecrt Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password. NVD-CWE-Other
CVE-2001-1466 2017-07-11 10:29 2001-12-30 Show GitHub Exploit DB Packet Storm
350718 - don_libes expect mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers t… NVD-CWE-Other
CVE-2001-1467 2017-07-11 10:29 2001-04-11 Show GitHub Exploit DB Packet Storm
350719 - secure_reality phpsecurepages PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a… NVD-CWE-Other
CVE-2001-1468 2017-07-11 10:29 2001-02-7 Show GitHub Exploit DB Packet Storm
350720 - ssh ssh The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of … NVD-CWE-Other
CVE-2001-1469 2017-07-11 10:29 2001-01-18 Show GitHub Exploit DB Packet Storm