Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2651 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2025-59028 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2652 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2025-59032 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2653 5.5 警告
Local 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-124
CWE-191
CVE-2026-26204 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2654 6.5 警告
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-307
CWE-362
CWE-367
CVE-2026-26206 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2655 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27857 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2656 7.5 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27858 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2657 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-27859 2026-05-7 12:30 2026-03-27 Show GitHub Exploit DB Packet Storm
2658 8.2 重要
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-121
CWE-400
CVE-2026-28221 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2659 9.9 緊急
Network 		Wazuh Inc. Wazuh Wazuh Inc.のWazuhにおける複数の脆弱性 CWE-22
CWE-73
CVE-2026-30893 2026-05-7 12:30 2026-04-29 Show GitHub Exploit DB Packet Storm
2660 9 緊急
Network 		angular Angular CLI angularのAngular CLIにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-32635 2026-05-7 12:30 2026-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345861 - francisco_burzi
shiba-design 		php-nuke
nukecalendar 		Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter. NVD-CWE-Other
CVE-2004-1913 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345862 - francisco_burzi
shiba-design 		php-nuke
nukecalendar 		SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter. NVD-CWE-Other
CVE-2004-1914 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345863 - lcdproc lcdproc Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments. NVD-CWE-Other
CVE-2004-1915 2017-07-11 10:31 2004-04-8 Show GitHub Exploit DB Packet Storm
345864 - - - Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_message… NVD-CWE-Other
CVE-2004-1916 2017-07-11 10:31 2004-04-8 Show GitHub Exploit DB Packet Storm
345865 - lcdproc lcdproc Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable. NVD-CWE-Other
CVE-2004-1917 2017-07-11 10:31 2004-04-8 Show GitHub Exploit DB Packet Storm
345866 - rsniff rsniff RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents t… NVD-CWE-Other
CVE-2004-1918 2017-07-11 10:31 2004-04-9 Show GitHub Exploit DB Packet Storm
345867 - crackalaka crackalaka The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings. NVD-CWE-Other
CVE-2004-1919 2017-07-11 10:31 2004-04-9 Show GitHub Exploit DB Packet Storm
345868 - x-micro wlan_11b_broadband_router_firmware X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access. NVD-CWE-Other
CVE-2004-1920 2017-07-11 10:31 2004-04-10 Show GitHub Exploit DB Packet Storm
345869 - x-micro wlan_11b_broadband_router_firmware X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access. NVD-CWE-Other
CVE-2004-1921 2017-07-11 10:31 2004-04-10 Show GitHub Exploit DB Packet Storm
345870 - tiki tikiwiki_cms\/groupware Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_director… CWE-200
Information Exposure 		CVE-2004-1923 2017-07-11 10:31 2004-04-11 Show GitHub Exploit DB Packet Storm