Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1011 9.1 緊急
Network 		OPNsense project OPNsense OPNsenseにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-45158 2026-05-18 11:24 2026-05-13 Show GitHub Exploit DB Packet Storm
1012 5.3 警告
Network 		Apache Software Foundation Apache Commons Configuration Apache Software FoundationのApache Commons Configurationにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-45205 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1013 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-4524 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1014 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-4527 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1015 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-6063 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1016 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6073 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1017 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6335 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1018 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6883 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1019 9.8 緊急
Network 		libexpat project libexpat libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性 CWE-331
エントロピー不足 		CVE-2026-7210 2026-05-18 11:24 2026-05-11 Show GitHub Exploit DB Packet Storm
1020 8.8 重要
Adjacent 		ZyXEL WRE6505 ファームウェア ZyXELのWRE6505 ファームウェアにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-7256 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346021 - arj_software_inc.
gentoo
suse 		unarj
linux
suse_linux 		Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames. NVD-CWE-Other
CVE-2004-0947 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346022 - danware_data netop NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, … NVD-CWE-Other
CVE-2004-0950 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346023 - jabber_software_foundation jabber_server Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long… NVD-CWE-Other
CVE-2004-0953 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346024 - zinf
debian 		zinf
debian_linux 		Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file. NVD-CWE-Other
CVE-2004-0964 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346025 - gnu
ubuntu 		gettext
ubuntu_linux 		The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to ove… NVD-CWE-Other
CVE-2004-0966 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346026 - gnu
gentoo
ubuntu 		groff
linux
ubuntu_linux 		The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a sym… NVD-CWE-Other
CVE-2004-0969 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346027 - gnu gzip The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: … NVD-CWE-Other
CVE-2004-0970 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346028 - netatalk
mandrakesoft
redhat 		open_source_apple_file_share_protocol_suite
mandrake_linux
mandrake_linux_corporate_server
fedora_core 		The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0974 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346029 - angus_mackay
debian
gentoo 		ez-ipupdate
debian_linux
linux 		Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0980 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm
346030 - mpg123 mpg123 Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a l… NVD-CWE-Other
CVE-2004-0982 2017-07-11 10:30 2005-02-9 Show GitHub Exploit DB Packet Storm