Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6141	6.5	警告 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-33569	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

6142	4.3	警告 Network	SAP	SAP HANA Database Explorer SAP HANA Cockpit	SAPのSAP HANA Cockpit等の複数製品における認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-34262	2026-05-7 11:30	2026-04-14	Show	GitHub Exploit DB Packet Storm

6143	5.3	警告 Network	Anviz Global	Anviz CX7 Firmware	Anviz GlobalのAnviz CX7 Firmwareにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-35061	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

6144	9.8	緊急 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-35546	2026-05-7 11:30	2026-04-17	Show	GitHub Exploit DB Packet Storm

6145	8.8	重要 Network	Anviz Global	Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmwareにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-35682	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

6146	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-36958	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

6147	7.5	重要 Network	Belkin International	N300 firmware	U-SpeedのN300 Firmwareにおける過度な認証試行の不適切な制限に関する脆弱性	CWE-307 過度な認証試行の不適切な制限	CVE-2026-36959	2026-05-7 11:29	2026-04-30	Show	GitHub Exploit DB Packet Storm

6148	8.8	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品におけるダウンロードしたコードの完全性検証不備に関する脆弱性	CWE-494 ダウンロードしたコードの完全性検証不備	CVE-2026-40066	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

6149	8.1	重要 Adjacent	Anviz Global	Crosschex Standard	Anviz GlobalのCrosschex Standardにおける通信チャネルの送信元の不適切な検証に関する脆弱性	CWE-940 通信チャネルの送信元の不適切な検証	CVE-2026-40434	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

6150	7.5	重要 Network	Anviz Global	Anviz CX7 Firmware Anviz CX2 Lite Firmware	Anviz GlobalのAnviz CX2 Lite Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-40461	2026-05-7 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348391	-	atthat.com	thatware	PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.	CWE-94 Code Injection	CVE-2002-2298	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348392	-	atthat.com	thatware	PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.	CWE-94 Code Injection	CVE-2002-2299	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348393	-	3com	webbngss3nbxnts	Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2300	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348394	-	lawson_software	lawson_financials	Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto t…	CWE-255 Credentials Management	CVE-2002-2301	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348395	-	3d3.com	shopfactory	3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2302	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348396	-	3d3.com	shopfactory	3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie…	CWE-310 Cryptographic Issues	CVE-2002-2303	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348397	-	myphpsoft	myphplinks	SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.	CWE-89 SQL Injection	CVE-2002-2304	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348398	-	phpsecure.org	immobilier	SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.	CWE-89 SQL Injection	CVE-2002-2305	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348399	-	kazaa	kazaa_media_desktop	Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.	CWE-399 Resource Management Errors	CVE-2002-2306	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348400	-	f2html.pl	f2html.pl	SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.	CWE-89 SQL Injection	CVE-2002-2383	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed