Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1491	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6752	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1492	7.3	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6753	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1493	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6754	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1494	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2026-6755	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1495	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox	Mozilla FoundationのMozilla Firefoxにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-6756	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1496	6.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における初期化されていないポインタのアクセスに関する脆弱性	CWE-824 初期化されていないポインタのアクセス	CVE-2026-6757	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1497	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6758	2026-04-24 11:40	2026-04-21	Show	GitHub Exploit DB Packet Storm

1498	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6759	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

1499	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6760	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

1500	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6761	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347691	-	electricmonk	proms	Multiple cross-site scripting (XSS) vulnerabilities in PROMS before 0.11 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.	NVD-CWE-Other	CVE-2005-1735	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347692	-	electricmonk	proms	PROMS 0.11 does not properly handle "certain combinations of rights," which gives more rights to users than intended.	NVD-CWE-Other	CVE-2005-1736	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347693	-	iron_bars_shell	iron_bars_shell	Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to "access files outside the home directory" and possibly execute arbitrar…	NVD-CWE-Other	CVE-2005-1738	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347694	-	iron_bars_shell	iron_bars_shell	Fixed in version 0.3 d	NVD-CWE-Other	CVE-2005-1738	2008-09-6 05:49	2005-05-24	Show	GitHub Exploit DB Packet Storm

347695	-	pavuk	pavuk	Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.	NVD-CWE-Other	CVE-2005-1035	2008-09-6 05:48	2005-04-5	Show	GitHub Exploit DB Packet Storm

347696	-	ibm	aix	Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.	NVD-CWE-Other	CVE-2005-1037	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347697	-	gnu	coreutils	Race condition in Core Utilities (coreutils) 5.2.1, when (1) mkdir, (2) mknod, or (3) mkfifo is running with the -m switch, allows local users to modify permissions of other files.	NVD-CWE-Other	CVE-2005-1039	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347698	-	novell	linux_desktop	Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] passed to network scripts without verification."	NVD-CWE-Other	CVE-2005-1040	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347699	-	logwatch redhat	logwatch enterprise_linux linux_advanced_workstation	The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expre…	NVD-CWE-Other	CVE-2005-1061	2008-09-6 05:48	2005-05-2	Show	GitHub Exploit DB Packet Storm

347700	-	kerio	kerio_mailserver personal_firewall winroute_firewall	The administration protocol for Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to cause a denial of service (CPU consu…	NVD-CWE-Other	CVE-2005-1063	2008-09-6 05:48	2005-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed