Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
141	6.8	警告 Physics	マイクロソフト	Microsoft Windows 11 24h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2025 Microsoft Windows 11 26h1	Windows BitLocker Security Feature Bypass Vulnerability New	CWE-77 コマンドインジェクション	CVE-2026-45585	2026-05-22 10:52	2026-05-20	Show	GitHub Exploit DB Packet Storm

142	5.5	警告 Local	GNU Project レッドハット	Red Hat OpenShift Container Platform Red Hat Enterprise Linux nano	GNU Project等の複数ベンダの製品における書式文字列に関する脆弱性 New	CWE-134 書式文字列の問題	CVE-2026-6843	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

143	5.5	警告 Local	GNU Project レッドハット	Red Hat Hardened Images Red Hat OpenShift Container Platform Red Hat Enterprise Linux GNU Binutils	GNU Project等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 New	CWE-400 リソースの枯渇	CVE-2026-6844	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

144	5	警告 Local	GNU Project レッドハット	Red Hat Hardened Images Red Hat OpenShift Container Platform Red Hat Enterprise Linux GNU Binutils	GNU Project等の複数ベンダの製品におけるNULL ポインタデリファレンスに関する脆弱性 New	CWE-476 NULL ポインタデリファレンス	CVE-2026-6845	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

145	7.8	重要 Local	GNU Project レッドハット	Red Hat Hardened Images Red Hat OpenShift Container Platform Red Hat Enterprise Linux GNU Binutils	GNU Project等の複数ベンダの製品におけるヒープベースのバッファオーバーフローの脆弱性 New	CWE-122 ヒープオーバーフロー	CVE-2026-6846	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

146	8.1	重要 Network	レッドハット	Quay	レッドハットのQuayにおけるセッション期限に関する脆弱性 New	CWE-613 不適切なセッション期限	CVE-2026-6848	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

147	7.1	重要 Local	レッドハット	Red Hat Enterprise Linux AI InstructLab	レッドハットのRed Hat Enterprise Linux AI等の複数製品におけるパストラバーサルの脆弱性 New	CWE-22 パス・トラバーサル	CVE-2026-6855	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

148	6.5	警告 Adjacent	Mozilla Foundation	Mozilla Firefox	Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性 New	CWE-200 CWE-306	CVE-2026-8706	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

149	3.1	低 Network	EMQX	emqx	EMQXのemqxにおける競合状態に関する脆弱性 New	CWE-362 競合状態	CVE-2026-8741	2026-05-22 10:52	2026-05-17	Show	GitHub Exploit DB Packet Storm

150	9.1	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における過度に許容されるクロスドメインホワイトリストに関する脆弱性 New	CWE-942 過度に許容されるクロスドメインホワイトリスト	CVE-2026-8948	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352251	-	-	-	Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.	NVD-CWE-Other	CVE-2004-1795	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

352252	-	sgi	irix	The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.	NVD-CWE-Other	CVE-2004-1891	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

352253	-	sgi	irix	ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.	NVD-CWE-Other	CVE-2004-2001	2008-09-6 05:42	2004-05-5	Show	GitHub Exploit DB Packet Storm

352254	-	zen_cart	zen_cart	The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_…	NVD-CWE-Other	CVE-2004-2024	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

352255	-	cvs	cvs	CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.	NVD-CWE-Other	CVE-2004-1342	2008-09-6 05:41	2005-04-27	Show	GitHub Exploit DB Packet Storm

352256	-	cvs	cvs	CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of…	NVD-CWE-Other	CVE-2004-1343	2008-09-6 05:41	2004-12-31	Show	GitHub Exploit DB Packet Storm

352257	-	netbsd	netbsd	Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges.	NVD-CWE-Other	CVE-2004-1374	2008-09-6 05:41	2004-12-18	Show	GitHub Exploit DB Packet Storm

352258	-	firebirdsql mozilla	firebird mozilla thunderbird	Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking th…	NVD-CWE-Other	CVE-2004-1449	2008-09-6 05:41	2004-12-31	Show	GitHub Exploit DB Packet Storm

352259	-	mozilla	mozilla	Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations.	NVD-CWE-Other	CVE-2004-1450	2008-09-6 05:41	2004-12-31	Show	GitHub Exploit DB Packet Storm

352260	-	mozilla	mozilla	Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facili…	NVD-CWE-Other	CVE-2004-1451	2008-09-6 05:41	2004-12-31	Show	GitHub Exploit DB Packet Storm