Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5481	5.3	警告 Network	Apache Software Foundation	Apache Doris-MCP-Server	Apache Software FoundationのApache Doris-MCP-ServerにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2025-66335	2026-04-24 11:34	2026-04-20	Show	GitHub Exploit DB Packet Storm

5482	6.5	警告 Network	フォーティネット	FortiManager Cloud FortiAnalyzer FortiAnalyzer Cloud FortiManager	フォーティネットのFortiAnalyzer等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2025-68649	2026-04-24 11:34	2026-04-14	Show	GitHub Exploit DB Packet Storm

5483	8.4	重要 Local	Nitro Software Inc.	Nitro PDF Pro	Nitro Software Inc.のNitro PDF Proにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2025-69627	2026-04-24 11:34	2026-04-13	Show	GitHub Exploit DB Packet Storm

5484	4.3	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるセッション期限に関する脆弱性	CWE-613 不適切なセッション期限	CVE-2026-0971	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5485	5.4	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2026-0972	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5486	6.5	警告 Network	Fortra	GoAnywhere Managed File Transfer	FortraのGoAnywhere Managed File Transferにおけるインジェクションに関する脆弱性	CWE-74 インジェクション	CVE-2026-1089	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5487	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-21998	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5488	2.7	低 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-22001	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5489	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22002	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

5490	4.9	警告 Network	オラクル	MySQL Server	オラクルのMySQL Serverにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-22004	2026-04-24 11:34	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354571	-	trend_micro	interscan_viruswall	Buffer overflow in the SMTP gateway for InterScan Virus Wall 3.32 and earlier allows a remote attacker to execute arbitrary commands via a long filename for a uuencoded attachment.	NVD-CWE-Other	CVE-2000-0428	2008-09-11 04:04	2000-05-4	Show	GitHub Exploit DB Packet Storm

354572	-	matt_kruse	calendar_script	The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-0432	2008-09-11 04:04	2000-05-16	Show	GitHub Exploit DB Packet Storm

354573	-	suse	suse_linux	The SuSE aaa_base package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such…	NVD-CWE-Other	CVE-2000-0433	2008-09-11 04:04	2000-05-2	Show	GitHub Exploit DB Packet Storm

354574	-	matthew_redman	allmanage	The administrative password for the Allmanage web site administration software is stored in plaintext in a file which could be accessed by remote attackers.	NVD-CWE-Other	CVE-2000-0434	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

354575	-	matthew_redman	allmanage	The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.	NVD-CWE-Other	CVE-2000-0435	2008-09-11 04:04	2000-05-13	Show	GitHub Exploit DB Packet Storm

354576	-	metaproducts	offline_explorer	MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0436	2008-09-11 04:04	2000-05-19	Show	GitHub Exploit DB Packet Storm

354577	-	network_associates	gauntlet_firewall webshield webshield_e-ppliance	Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.	NVD-CWE-Other	CVE-2000-0437	2008-09-11 04:04	2000-05-18	Show	GitHub Exploit DB Packet Storm

354578	-	caldera slackware suse turbolinux	openlinux slackware_linux suse_linux turbolinux	Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter.	NVD-CWE-Other	CVE-2000-0438	2008-09-11 04:04	2000-05-22	Show	GitHub Exploit DB Packet Storm

354579	-	freebsd netbsd	freebsd netbsd	NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.	NVD-CWE-Other	CVE-2000-0440	2008-09-11 04:04	2000-05-1	Show	GitHub Exploit DB Packet Storm

354580	-	ibm	aix	Vulnerability in AIX 3.2.x and 4.x allows local users to gain write access to files on locally or remotely mounted AIX filesystems.	NVD-CWE-Other	CVE-2000-0441	2008-09-11 04:04	2000-05-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed