Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1671 9.8 緊急
Network
The PHP Group PHP The PHP GroupのPHPにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7261 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1672 7.5 重要
Network
The PHP Group PHP The PHP GroupのPHPにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-7262 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1673 7.5 重要
Network
The PHP Group PHP The PHP GroupのPHPにおける複数の脆弱性 CWE-404
CWE-835
CVE-2026-7263 2026-05-14 10:15 2026-05-10 Show GitHub Exploit DB Packet Storm
1674 4.4 警告
Local
Ivanti secure access client Ivantiのsecure access clientにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-7431 2026-05-14 10:15 2026-05-12 Show GitHub Exploit DB Packet Storm
1675 7 重要
Local
Ivanti secure access client Ivantiのsecure access clientにおける競合状態に関する脆弱性 CWE-362
競合状態
CVE-2026-7432 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1676 8.8 重要
Network
SUN NET TECHNOLOGIES CO., LTD. eHRD CTMS SUN NET TECHNOLOGIES CO., LTD.のeHRD CTMSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-7489 2026-05-14 10:14 2026-05-2 Show GitHub Exploit DB Packet Storm
1677 7.5 重要
Network
The PHP Group PHP The PHP GroupのPHPにおける複数の脆弱性 CWE-125
CWE-190
CVE-2026-7568 2026-05-14 10:14 2026-05-10 Show GitHub Exploit DB Packet Storm
1678 6.5 警告
Network
Ivanti Ivanti Endpoint Manager IvantiのIvanti Endpoint Managerにおける危険なメソッドや機能の公開に関する脆弱性 CWE-749
危険なメソッドや機能の公開
CVE-2026-8109 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1679 7.8 重要
Local
Ivanti Ivanti Endpoint Manager IvantiのIvanti Endpoint Managerにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-8110 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
1680 8.8 重要
Network
Ivanti Ivanti Endpoint Manager IvantiのIvanti Endpoint ManagerにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-8111 2026-05-14 10:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345741 - - - Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header. NVD-CWE-Other
CVE-2004-1752 2017-07-11 10:31 2004-08-24 Show GitHub Exploit DB Packet Storm
345742 - mozilla
netscape
firefox
mozilla
navigator
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allo… NVD-CWE-Other
CVE-2004-1753 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345743 - - - The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after th… NVD-CWE-Other
CVE-2004-1755 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345744 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejec… NVD-CWE-Other
CVE-2004-1756 2017-07-11 10:31 2004-04-13 Show GitHub Exploit DB Packet Storm
345745 - bea weblogic_server BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges. NVD-CWE-Other
CVE-2004-1757 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345746 - bea weblogic_server BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in co… NVD-CWE-Other
CVE-2004-1758 2017-07-11 10:31 2004-04-13 Show GitHub Exploit DB Packet Storm
345747 - cisco
ibm
emergency_responder
ip_call_center_express_enhanced
ip_call_center_express_standard
ip_interactive_voice_response
personal_assistant
director_agent
call_manager
internet_service_…
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 1… CWE-399
 Resource Management Errors
CVE-2004-1759 2017-07-11 10:31 2004-01-21 Show GitHub Exploit DB Packet Storm
345748 - cisco
ibm
emergency_responder
ip_call_center_express_enhanced
ip_call_center_express_standard
ip_interactive_voice_response
personal_assistant
director_agent
call_manager
internet_service_…
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain adminis… CWE-287
Improper Authentication
CVE-2004-1760 2017-07-11 10:31 2004-01-21 Show GitHub Exploit DB Packet Storm
345749 - f-secure f-secure_anti-virus Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV. NVD-CWE-Other
CVE-2004-1762 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345750 - haht_commerce hahtsite_scenario_server Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project n… NVD-CWE-Other
CVE-2004-1763 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm