Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1481	7.1	重要 Network	ConnectWise, Inc.	automate	ConnectWise, Inc.のautomateにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-6066	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

1482	9.1	緊急 Network	Open JS Foundation	fastify/middie	Open JS Foundationの@fastify/middieにおける解釈の競合に関する脆弱性	CWE-436 解釈の競合	CVE-2026-6270	2026-04-24 11:40	2026-04-16	Show	GitHub Exploit DB Packet Storm

1483	9.9	緊急 Network	ASUSTOR Inc.	data master	ASUSTOR Inc.のdata masterにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6643	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

1484	9.1	緊急 Network	ASUSTOR Inc.	data master	ASUSTOR Inc.のdata masterにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-6644	2026-04-24 11:40	2026-04-20	Show	GitHub Exploit DB Packet Storm

1485	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6746	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1486	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6747	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1487	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6748	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1488	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-6749	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1489	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6750	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1490	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていない変数の使用に関する脆弱性	CWE-457 初期化されていない変数の使用	CVE-2026-6751	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347691	-	electricmonk	proms	Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.	NVD-CWE-Other	CVE-2005-1735	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347692	-	electricmonk	proms	PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.	NVD-CWE-Other	CVE-2005-1736	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347693	-	iron_bars_shell	iron_bars_shell	Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access files outside the home directory" and possibly execute arbitrar…	NVD-CWE-Other	CVE-2005-1738	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347694	-	iron_bars_shell	iron_bars_shell	Fixed in version 0.3 d	NVD-CWE-Other	CVE-2005-1738	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347695	-	pavuk	pavuk	Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.	NVD-CWE-Other	CVE-2005-1035	2008-09-6 05:48	2005-04-5	Show	GitHub Exploit DB Packet Storm

347696	-	ibm	aix	Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.	NVD-CWE-Other	CVE-2005-1037	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347697	-	gnu	coreutils	Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.	NVD-CWE-Other	CVE-2005-1039	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347698	-	novell	linux_desktop	Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."	NVD-CWE-Other	CVE-2005-1040	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347699	-	logwatch redhat	logwatch enterprise_linux linux_advanced_workstation	The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expre…	NVD-CWE-Other	CVE-2005-1061	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347700	-	kerio	kerio_mailserver personal_firewall winroute_firewall	The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consu…	NVD-CWE-Other	CVE-2005-1063	2008-09-6 05:48	2005-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed