Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5451	5.3	警告 Network	MCPHub	MCPHub	MCPHubにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2025-13822	2026-05-7 12:07	2026-04-14	Show	GitHub Exploit DB Packet Storm

5452	5.3	警告 Network	IBM	IBM DB2	IBMのIBM DB2における入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2025-14688	2026-05-7 12:07	2026-04-30	Show	GitHub Exploit DB Packet Storm

5453	6.5	警告 Network	IBM	IBM DB2	IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2025-36122	2026-05-7 12:07	2026-04-30	Show	GitHub Exploit DB Packet Storm

5454	5.3	警告 Network	HCL Technologies Limited	HCL AION	HCL Technologies LimitedのHCL AIONにおけるエラーメッセージによる情報漏えいに関する脆弱性	CWE-209 エラーメッセージによる情報漏えい	CVE-2025-52641	2026-05-7 12:07	2026-04-15	Show	GitHub Exploit DB Packet Storm

5455	6.4	警告 Local	レッドハット	Ansible Automation Platform	レッドハットのAnsible Automation Platformにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-57847	2026-05-7 12:07	2026-04-8	Show	GitHub Exploit DB Packet Storm

5456	6.7	警告 Local	レッドハット	Red Hat Advanced Cluster Management for Kubernetes	レッドハットのRed Hat Advanced Cluster Management for Kubernetesにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-57851	2026-05-7 12:07	2026-04-8	Show	GitHub Exploit DB Packet Storm

5457	6.5	警告 Network	IBM	IBM DB2	IBMのIBM DB2における入力で指定された数量の不適切な検証に関する脆弱性	CWE-1284 入力で指定された数量の不適切な検証	CVE-2026-1577	2026-05-7 12:07	2026-04-30	Show	GitHub Exploit DB Packet Storm

5458	5.5	警告 Local	サムスン	android	サムスンのAndroidにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-21023	2026-05-7 12:06	2026-04-29	Show	GitHub Exploit DB Packet Storm

5459	4.8	警告 Network	VMware	Spring Security	VMwareのSpring SecurityにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-22751	2026-05-7 12:06	2026-04-21	Show	GitHub Exploit DB Packet Storm

5460	8.1	重要 Network	フォーティネット	FortiAnalyzer Cloud FortiManager Cloud	フォーティネットのFortiAnalyzer Cloud等の複数製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-22828	2026-05-7 12:06	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346851	-	cgi-world	poll_it poll_it_pro	pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.	NVD-CWE-Other	CVE-2000-1070	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346852	-	netscape	iplanet_ical	The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.	NVD-CWE-Other	CVE-2000-1071	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346853	-	netscape	iplanet_ical	iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program wit…	NVD-CWE-Other	CVE-2000-1072	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346854	-	netscape	iplanet_ical	csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a…	NVD-CWE-Other	CVE-2000-1073	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346855	-	netscape	iplanet_ical	csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse lib…	NVD-CWE-Other	CVE-2000-1074	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346856	-	netscape sun	directory_server iplanet_certificate_management_system	Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End En…	NVD-CWE-Other	CVE-2000-1075	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346857	-	iplanet	iplanet_web_server	Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.	NVD-CWE-Other	CVE-2000-1077	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346858	-	id_software j._p._grossman	quake proquake	Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.	NVD-CWE-Other	CVE-2000-1080	2017-10-10 10:29	2000-11-1	Show	GitHub Exploit DB Packet Storm

346859	-	immunix conectiva mandrakesoft redhat suse	immunix linux mandrake_linux suse_linux	modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-1095	2017-10-10 10:29	2001-01-9	Show	GitHub Exploit DB Packet Storm

346860	-	sonicwall	soho_firewall	The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.	NVD-CWE-Other	CVE-2000-1097	2017-10-10 10:29	2001-01-9	Show	GitHub Exploit DB Packet Storm