Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
181 9.8 緊急
Network
Open JS Foundation WebdriverIO Open JS FoundationのWebdriverIOにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-25244 2026-05-21 10:55 2026-05-18 Show GitHub Exploit DB Packet Storm
182 6.5 警告
Network
マイクロソフト Power Automate for Desktop Microsoft Power Automate デスクトップの情報漏えいの脆弱性 New CWE-200
情報漏えい
CVE-2026-40374 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
183 7.8 重要
Local
protobufjs project protobufjs-cli protobufjs projectのprotobufjs-cliにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-42290 2026-05-21 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
184 6.1 警告
Network
beaugunderson ip-address beaugundersonのip-addressにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42338 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
185 7.6 重要
Network
PocketBase PocketBase PocketBaseにおける認証に関する脆弱性 New CWE-287
不適切な認証
CVE-2026-44166 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
186 7.2 重要
Network
German Cancer Research Center (DKFZ) nnU-Net German Cancer Research Center (DKFZ)のnnU-Netにおけるインジェクションに関する脆弱性 New CWE-74
インジェクション
CVE-2026-44246 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
187 8.7 重要
Network
protobufjs project protobufjs-cli protobufjs projectのprotobufjs-cliにおけるコードインジェクションの脆弱性 New CWE-94
コード・インジェクション
CVE-2026-44295 2026-05-21 10:55 2026-05-13 Show GitHub Exploit DB Packet Storm
188 9.8 緊急
Network
WGDashboard WGDashboard WGDashboardにおける入力確認に関する脆弱性 New CWE-20
不適切な入力確認
CVE-2026-44343 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
189 8.8 重要
Network
Tabby Tabby TabbyにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-45035 2026-05-21 10:55 2026-05-15 Show GitHub Exploit DB Packet Storm
190 7 重要
Local
Tabby Tabby TabbyにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション
CVE-2026-45036 2026-05-21 10:55 2026-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346181 - rarlab winrar WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to… NVD-CWE-Other
CVE-2004-1254 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346182 - 2fax 2fax Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF. NVD-CWE-Other
CVE-2004-1255 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346183 - abcmidi abcmidi Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files. NVD-CWE-Other
CVE-2004-1256 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346184 - abc2mtex abc2mtex Buffer overflow in the process_abc function in abc.c for abc2mtex 1.6.1 allows remote attackers to execute arbitrary code via crafted ABC files. NVD-CWE-Other
CVE-2004-1257 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346185 - moinejf abcm2ps Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2004-1258 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346186 - abcpp abcpp Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via crafted ABC files. NVD-CWE-Other
CVE-2004-1259 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346187 - abctab2ps abctab2ps Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC fi… NVD-CWE-Other
CVE-2004-1260 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346188 - asp2php asp2php Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code via crafted ASP scripts. NVD-CWE-Other
CVE-2004-1261 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346189 - stuart_cunningham bsb2ppm Buffer overflow in the bsb_open_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BSB pictures. NVD-CWE-Other
CVE-2004-1262 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346190 - changepassword changepassword changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program. NVD-CWE-Other
CVE-2004-1263 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm