Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6171 8.1 重要
Network 		The Kyverno Authors Kyverno The Kyverno AuthorsのKyvernoにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-40868 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6172 8.1 重要
Network 		goshs goshs goshsにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-40883 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6173 9.8 緊急
Network 		goshs goshs goshsにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40884 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6174 8.8 重要
Network 		goshs goshs goshsにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-40885 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6175 7.5 重要
Network 		gomarkdown markdown gomarkdownのMarkdownにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40890 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6176 10 緊急
Network 		WWBN AVideo WWBNのAVideoにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-40911 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
6177 5.4 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40923 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
6178 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40924 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
6179 7.5 重要
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-40938 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
6180 6.5 警告
Network 		Apache Software Foundation ActiveMQ Web
Apache ActiveMQ 		Apache Software FoundationのApache ActiveMQ等の複数製品における複数の脆弱性 CWE-79
CWE-79
CWE-915
CVE-2026-41043 2026-04-30 12:27 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353081 - ecometry sgdynamo Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter. NVD-CWE-Other
CVE-2002-0375 2017-07-11 10:29 2002-05-29 Show GitHub Exploit DB Packet Storm
353082 - vignette storyserver
vignette 		Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL… NVD-CWE-Other
CVE-2002-0385 2017-07-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
353083 - red-m 1050ap_lan_acess_point Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration pass… NVD-CWE-Other
CVE-2002-0393 2017-07-11 10:29 2002-07-26 Show GitHub Exploit DB Packet Storm
353084 - workforceroi xpede Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges. NVD-CWE-Other
CVE-2002-0486 2017-07-11 10:29 2002-08-12 Show GitHub Exploit DB Packet Storm
353085 - inn inn Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls. NVD-CWE-Other
CVE-2002-0526 2017-07-11 10:29 2002-08-12 Show GitHub Exploit DB Packet Storm
353086 - postboard
postnuke_software_foundation 		postboard
postnuke 		Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title. NVD-CWE-Other
CVE-2002-0535 2017-07-11 10:29 2002-07-3 Show GitHub Exploit DB Packet Storm
353087 - oracle application_server
application_server_web_cache
oracle8i
oracle9i 		The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2… CWE-287
Improper Authentication 		CVE-2002-0563 2017-07-11 10:29 2002-07-3 Show GitHub Exploit DB Packet Storm
353088 - aol instant_messenger AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the i… NVD-CWE-Other
CVE-2002-0592 2017-07-11 10:29 2002-06-18 Show GitHub Exploit DB Packet Storm
353089 - snapgear snapgear_lite\+_firewall Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port. NVD-CWE-Other
CVE-2002-0602 2017-07-11 10:29 2002-06-18 Show GitHub Exploit DB Packet Storm
353090 - entrust entrust_authority_security_manager Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that requi… NVD-CWE-Other
CVE-2002-0712 2017-07-11 10:29 2004-02-3 Show GitHub Exploit DB Packet Storm