Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6321	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-31505	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

6322	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31506	2026-04-30 12:15	2026-04-22	Show	GitHub Exploit DB Packet Storm

6323	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-31507	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

6324	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31508	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

6325	8.8	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File TransferにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-23780	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

6326	9.8	緊急 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-23781	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

6327	7.5	重要 Network	BMC Software	Control-M Managed File Transfer	BMC SoftwareのControl-M Managed File Transferにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-23782	2026-04-30 12:14	2026-04-10	Show	GitHub Exploit DB Packet Storm

6328	9.9	緊急 Network	Doorman	Doorman	Doormanにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-30269	2026-04-30 12:14	2026-04-20	Show	GitHub Exploit DB Packet Storm

6329	7.5	重要 Network	PowerDNS	PowerDNS Recursor dnsdist PowerDNS Authoritative Server	PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33257	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

6330	7.5	重要 Network	PowerDNS	PowerDNS Recursor dnsdist PowerDNS Authoritative Server	PowerDNSのPowerDNS Authoritative Server等の複数製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33260	2026-04-30 12:14	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348391	-	atthat.com	thatware	PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.	CWE-94 Code Injection	CVE-2002-2298	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348392	-	atthat.com	thatware	PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.	CWE-94 Code Injection	CVE-2002-2299	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348393	-	3com	webbngss3nbxnts	Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2002-2300	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348394	-	lawson_software	lawson_financials	Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto t…	CWE-255 Credentials Management	CVE-2002-2301	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348395	-	3d3.com	shopfactory	3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2002-2302	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348396	-	3d3.com	shopfactory	3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie…	CWE-310 Cryptographic Issues	CVE-2002-2303	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348397	-	myphpsoft	myphplinks	SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.	CWE-89 SQL Injection	CVE-2002-2304	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348398	-	phpsecure.org	immobilier	SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.	CWE-89 SQL Injection	CVE-2002-2305	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348399	-	kazaa	kazaa_media_desktop	Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.	CWE-399 Resource Management Errors	CVE-2002-2306	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

348400	-	f2html.pl	f2html.pl	SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.	CWE-89 SQL Injection	CVE-2002-2383	2017-07-29 10:29	2002-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed