Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6341 9.9 緊急
Network 		マイクロソフト Azure IOT Central Azure IoT Central の特権昇格の脆弱性 CWE-200
情報漏えい 		CVE-2026-21515 2026-04-30 12:14 2026-04-24 Show GitHub Exploit DB Packet Storm
6342 4.8 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23752 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
6343 4.8 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23753 2026-04-30 12:14 2026-04-20 Show GitHub Exploit DB Packet Storm
6344 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23756 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
6345 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23757 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
6346 5.4 警告
Network 		GFI GFI HelpDesk GFIのGFI HelpDeskにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-23758 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
6347 6.5 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-25773 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
6348 4.3 警告
Network 		Mattermost, Inc. Focalboard Mattermost, Inc.のFocalboardにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-28736 2026-04-30 12:13 2026-04-3 Show GitHub Exploit DB Packet Storm
6349 7.8 重要
Local 		DeepCool DeepCreative DeepCoolのDeepCreativeにおける安全でない継承されたパーミッションに関する脆弱性 CWE-277
安全でない継承されたパーミッション 		CVE-2026-30266 2026-04-30 12:13 2026-04-20 Show GitHub Exploit DB Packet Storm
6350 7.5 重要
Network 		Angeet ES3 KVM Firmware AngeetのES3 KVM Firmwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-32297 2026-04-30 12:13 2026-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354601 - caldera unixware CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable. NVD-CWE-Other
CVE-2002-0105 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354602 - bea weblogic_server BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. NVD-CWE-Other
CVE-2002-0106 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354603 - cacheflow cacheos Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another v… NVD-CWE-Other
CVE-2002-0107 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354604 - linksys befn2ps4
befsr41
befsr81 		Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the def… NVD-CWE-Other
CVE-2002-0109 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354605 - nevrona_designs miramail Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the… NVD-CWE-Other
CVE-2002-0110 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354606 - funsoft dinos_webserver Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2002-0111 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354607 - etype eserv Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. NVD-CWE-Other
CVE-2002-0112 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354608 - palm palm_os Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap. NVD-CWE-Other
CVE-2002-0116 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354609 - efax efax efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message. NVD-CWE-Other
CVE-2002-0129 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm
354610 - efax efax Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument. NVD-CWE-Other
CVE-2002-0130 2016-10-18 11:16 2002-03-25 Show GitHub Exploit DB Packet Storm