Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6581 9.8 緊急
Network 		IBM IBM i IBMのIBM iにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-2311 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
6582 9.1 緊急
Network 		Eclipse Foundation Jetty Eclipse FoundationのJettyにおけるHTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング 		CVE-2026-2332 2026-05-7 12:06 2026-04-14 Show GitHub Exploit DB Packet Storm
6583 9.1 緊急
Network 		Dolibarr ERP & CRM dolibarr erp/crm Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-23500 2026-05-7 12:06 2026-04-17 Show GitHub Exploit DB Packet Storm
6584 5.3 警告
Local 		FreeType Project FreeType FreeType ProjectのFreeTypeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-23865 2026-05-7 12:06 2026-03-2 Show GitHub Exploit DB Packet Storm
6585 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける不正な正規表現に関する脆弱性 CWE-185
不正な正規表現 		CVE-2026-25542 2026-05-7 12:06 2026-04-21 Show GitHub Exploit DB Packet Storm
6586 6.5 警告
Adjacent 		FRRouting Project FRRouting FRRouting ProjectのFRRoutingにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-28532 2026-05-7 12:06 2026-04-30 Show GitHub Exploit DB Packet Storm
6587 8.8 重要
Network 		CloudARK KubePlus CloudARKのKubePlusにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-29955 2026-05-7 12:06 2026-04-13 Show GitHub Exploit DB Packet Storm
6588 7.8 重要
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける領域間での誤ったリソース移動に関する脆弱性 CWE-669
領域間での誤ったリソース移動 		CVE-2026-31431 2026-05-7 12:06 2026-04-22 Show GitHub Exploit DB Packet Storm
6589 5.3 警告
Network 		レッドハット
kernel.org		 util-linux
Red Hat Hardened Images 		kernel.org等の複数ベンダの製品における代替名による認証回避に関する脆弱性 CWE-289
代替名による認証回避 		CVE-2026-3184 2026-05-7 12:06 2026-04-3 Show GitHub Exploit DB Packet Storm
6590 5.5 警告
Local 		Electron electron Electronのelectronにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-34764 2026-05-7 12:06 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348961 - recourse_technologies mantrap Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and out of the /proc/self directory and executing various commands such as ls or pwd. NVD-CWE-Other
CVE-2000-1146 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348962 - volano_llc volanochatpro The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the server administrator passwords in plaintext, which allows local users to gain p… NVD-CWE-Other
CVE-2000-1148 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348963 - aladdin_enterprises ghostscript ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack. NVD-CWE-Other
CVE-2000-1162 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348964 - aladdin_enterprises ghostscript ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a T… NVD-CWE-Other
CVE-2000-1163 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348965 - att winvnc WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwo… NVD-CWE-Other
CVE-2000-1164 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348966 - balabit syslog-ng Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier. NVD-CWE-Other
CVE-2000-1165 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348967 - twig_development_team twig Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhost… NVD-CWE-Other
CVE-2000-1166 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348968 - freebsd freebsd ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system. NVD-CWE-Other
CVE-2000-1167 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348969 - openbsd openssh OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to t… NVD-CWE-Other
CVE-2000-1169 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm
348970 - pelesoft netsnap Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request. NVD-CWE-Other
CVE-2000-1170 2017-10-10 10:29 2001-01-9 Show GitHub Exploit DB Packet Storm