Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1711 7.8 重要
Local 		dail8859 Notepad Next dail8859のNotepad Nextにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-42214 2026-05-14 10:12 2026-05-7 Show GitHub Exploit DB Packet Storm
1712 7.1 重要
Network 		Legeling PromptHUB LegelingのPromptHUBにおける複数の脆弱性 CWE-20
CWE-693
CWE-918
CVE-2026-42261 2026-05-14 10:12 2026-05-8 Show GitHub Exploit DB Packet Storm
1713 9.9 緊急
Network 		Apache Software Foundation Polaris Apache Software FoundationのPolarisにおける複数の脆弱性 CWE-20
CWE-862
CVE-2026-42809 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
1714 9.9 緊急
Network 		Apache Software Foundation Polaris Apache Software FoundationのPolarisにおける複数の脆弱性 CWE-116
CWE-20
CVE-2026-42810 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
1715 9.9 緊急
Network 		Apache Software Foundation Polaris Apache Software FoundationのPolarisにおける複数の脆弱性 CWE-20
CWE-917
CVE-2026-42811 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
1716 9.9 緊急
Network 		Apache Software Foundation Polaris Apache Software FoundationのPolarisにおける複数の脆弱性 CWE-20
CWE-284
CWE-732
CWE-863
CVE-2026-42812 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
1717 7.5 重要
Network 		Open JS Foundation fast-uri Open JS Foundationのfast-uriにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6321 2026-05-14 10:12 2026-05-4 Show GitHub Exploit DB Packet Storm
1718 7.5 重要
Network 		Open JS Foundation fast-uri Open JS Foundationのfast-uriにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合 		CVE-2026-6322 2026-05-14 10:12 2026-05-5 Show GitHub Exploit DB Packet Storm
1719 4.8 警告
Network 		KDDI Androidアプリ「あんしんフィルター for au」 Androidアプリ「あんしんフィルター for au」における重要情報の平文送信の脆弱性 CWE-Other
その他 		CVE-2026-41281 2026-05-13 12:14 2026-05-13 Show GitHub Exploit DB Packet Storm
1720 7.8 重要
Local 		Bytello Ltd. Bytello Share（Windows版） Bytello Share（Windows版）のEXE形式インストーラにおけるDLL読み込みに関する脆弱性 CWE-Other
その他 		CVE-2026-44612 2026-05-13 12:05 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345751 - mod_security mod_security Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests. NVD-CWE-Other
CVE-2004-1765 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345752 - - - The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain se… NVD-CWE-Other
CVE-2004-1766 2017-07-11 10:31 2004-01-20 Show GitHub Exploit DB Packet Storm
345753 - symantec brightmail_antispam The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages wit… NVD-CWE-Other
CVE-2004-1768 2017-07-11 10:31 2004-12-17 Show GitHub Exploit DB Packet Storm
345754 - cpanel cpanel The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to res… NVD-CWE-Other
CVE-2004-1769 2017-07-11 10:31 2004-03-11 Show GitHub Exploit DB Packet Storm
345755 - cpanel cpanel The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter. NVD-CWE-Other
CVE-2004-1770 2017-07-11 10:31 2004-03-11 Show GitHub Exploit DB Packet Storm
345756 - open_group scalable_ogo Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users. NVD-CWE-Other
CVE-2004-1771 2017-07-11 10:31 2004-11-30 Show GitHub Exploit DB Packet Storm
345757 - oracle application_server
oracle10g 		Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER paramet… NVD-CWE-Other
CVE-2004-1774 2017-07-11 10:31 2004-08-31 Show GitHub Exploit DB Packet Storm
345758 - cisco ios
catos 		Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write… NVD-CWE-Other
CVE-2004-1775 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345759 - cisco ios Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Spec… NVD-CWE-Other
CVE-2004-1776 2017-07-11 10:31 2001-02-28 Show GitHub Exploit DB Packet Storm
345760 - thwboard thwboard_beta Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter. NVD-CWE-Other
CVE-2004-1779 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm