Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2701 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG3 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG3 Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-7151 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
2702 8.8 重要
Network
Shenzhen Tenda Technology Co.,Ltd. HG3 Firmware Shenzhen Tenda Technology Co.,Ltd.のHG3 Firmwareにおける複数の脆弱性 CWE-74
CWE-77
CVE-2026-7160 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
2703 7.3 重要
Network
NextChat NextChat NextChatにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-7177 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
2704 7.3 重要
Network
NextChat NextChat NextChatにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-7178 2026-05-7 12:28 2026-04-27 Show GitHub Exploit DB Packet Storm
2705 7.3 重要
Network
Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird
Mozilla FoundationのMozilla Firefox等の複数製品における複数の脆弱性 CWE-119
CWE-787
CVE-2026-7323 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2706 9.6 緊急
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7333 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2707 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7334 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2708 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7335 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2709 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-7336 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
2710 8.8 重要
Network
Google Google Chrome GoogleのGoogle Chromeにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え
CVE-2026-7337 2026-05-7 12:28 2026-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345891 - softwin bitdefender The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestF… NVD-CWE-Other
CVE-2004-1947 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345892 - ncftp_software ncftp NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which di… NVD-CWE-Other
CVE-2004-1948 2017-07-11 10:31 2004-04-20 Show GitHub Exploit DB Packet Storm
345893 - postnuke_software_foundation postnuke SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset paramete… NVD-CWE-Other
CVE-2004-1949 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345894 - phpbb_group phpbb phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses. NVD-CWE-Other
CVE-2004-1950 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345895 - xine xine
xine-lib
xine-ui
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename option… NVD-CWE-Other
CVE-2004-1951 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345896 - advanced_guestbook advanced_guestbook SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password. NVD-CWE-Other
CVE-2004-1952 2017-07-11 10:31 2004-04-23 Show GitHub Exploit DB Packet Storm
345897 - phprofession phprofession phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message. NVD-CWE-Other
CVE-2004-1953 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345898 - phprofession phprofession Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter. NVD-CWE-Other
CVE-2004-1954 2017-07-11 10:31 2004-04-21 Show GitHub Exploit DB Packet Storm
345899 - phprofession phprofession SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter. NVD-CWE-Other
CVE-2004-1955 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345900 - postnuke_software_foundation postnuke PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account… NVD-CWE-Other
CVE-2004-1956 2017-07-11 10:31 2004-04-21 Show GitHub Exploit DB Packet Storm