Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2841 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-8973 2026-05-22 10:51 2026-05-19 Show GitHub Exploit DB Packet Storm
2842 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-8974 2026-05-22 10:51 2026-05-19 Show GitHub Exploit DB Packet Storm
2843 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-8975 2026-05-22 10:51 2026-05-19 Show GitHub Exploit DB Packet Storm
2844 3.3 低
Local 		Siber Systems Inc. RoboForm Password Manager Androidアプリ「パスワード管理 ロボフォーム」のintent処理における検証不備の脆弱性 CWE-357
危険な操作に対する不十分な警告 		CVE-2026-47782 2026-05-21 16:37 2026-05-20 Show GitHub Exploit DB Packet Storm
2845 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月19日） - - 2026-05-21 16:17 2026-05-20 Show GitHub Exploit DB Packet Storm
2846 6.1 警告
Network 		Northern.tech cfengine Northern.techのcfengineにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-24710 2026-05-21 10:55 2026-05-14 Show GitHub Exploit DB Packet Storm
2847 5.3 警告
Network 		Northern.tech cfengine Northern.techのcfengineにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-24711 2026-05-21 10:55 2026-05-14 Show GitHub Exploit DB Packet Storm
2848 7.3 重要
Network 		Northern.tech cfengine Northern.techのcfengineにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-24712 2026-05-21 10:55 2026-05-14 Show GitHub Exploit DB Packet Storm
2849 9.8 緊急
Network 		Open JS Foundation WebdriverIO Open JS FoundationのWebdriverIOにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-25244 2026-05-21 10:55 2026-05-18 Show GitHub Exploit DB Packet Storm
2850 6.5 警告
Network 		マイクロソフト Power Automate for Desktop Microsoft Power Automate デスクトップの情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-40374 2026-05-21 10:55 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344791 - gnu wget Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded. NVD-CWE-Other
CVE-2004-2014 2018-10-4 06:29 2004-12-31 Show GitHub Exploit DB Packet Storm
344792 - xscreensaver xscreensaver rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the… NVD-CWE-Other
CVE-2004-2655 2018-10-4 06:29 2004-12-31 Show GitHub Exploit DB Packet Storm
344793 - xscreensaver xscreensaver This vulnerability is addressed in the following product release: XScreenSaver, XScreenSaver, 4.18 NVD-CWE-Other
CVE-2004-2655 2018-10-4 06:29 2004-12-31 Show GitHub Exploit DB Packet Storm
344794 - sambar sambar_server Cross-site scripting (XSS) vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the (1) Remote Proxy… NVD-CWE-Other
CVE-2005-3506 2018-09-28 06:40 2005-11-5 Show GitHub Exploit DB Packet Storm
344795 - geeklog geeklog search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive information via invalid (1) datestart and (2) dateend parameters, which leaks the … NVD-CWE-Other
CVE-2005-4026 2018-09-28 06:39 2005-12-5 Show GitHub Exploit DB Packet Storm
344796 - sophos sophos_anti-virus Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly sc… NVD-CWE-Other
CVE-2005-4680 2018-09-28 06:39 2005-12-31 Show GitHub Exploit DB Packet Storm
344797 - bea weblogic_server HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP hea… NVD-CWE-Other
CVE-2005-4749 2018-09-28 06:39 2005-12-31 Show GitHub Exploit DB Packet Storm
344798 - bea weblogic_server Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allow remote attackers to inject… NVD-CWE-Other
CVE-2005-4751 2018-09-28 06:39 2005-12-31 Show GitHub Exploit DB Packet Storm
344799 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain privileges by using the run-as deployment descriptor element to change the privi… NVD-CWE-Other
CVE-2005-4752 2018-09-28 06:39 2005-12-31 Show GitHub Exploit DB Packet Storm
344800 - bea weblogic_server BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, in certain "heavy usage" scenarios, report incorrect severity levels for an audit event, which might allow attac… NVD-CWE-Other
CVE-2005-4753 2018-09-28 06:39 2005-12-31 Show GitHub Exploit DB Packet Storm