Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
331	7.1	重要 Local	レッドハット	Red Hat Enterprise Linux AI InstructLab	レッドハットのRed Hat Enterprise Linux AI等の複数製品におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6855	2026-05-22 10:52	2026-04-22	Show	GitHub Exploit DB Packet Storm

332	6.5	警告 Adjacent	Mozilla Foundation	Mozilla Firefox	Mozilla FoundationのMozilla Firefoxにおける複数の脆弱性	CWE-200 CWE-306	CVE-2026-8706	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

333	3.1	低 Network	EMQX	emqx	EMQXのemqxにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-8741	2026-05-22 10:52	2026-05-17	Show	GitHub Exploit DB Packet Storm

334	9.1	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における過度に許容されるクロスドメインホワイトリストに関する脆弱性	CWE-942 過度に許容されるクロスドメインホワイトリスト	CVE-2026-8948	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

335	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-8949	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

336	9.3	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における同一生成元ポリシー違反に関する脆弱性	CWE-346 同一生成元ポリシー違反	CVE-2026-8950	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

337	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox	Mozilla FoundationのMozilla Firefoxにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-8951	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

338	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8952	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

339	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-8955	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

340	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-8956	2026-05-22 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345691	-	gnu	cfengine	Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authen…	NVD-CWE-Other	CVE-2004-1701	2017-07-11 10:31	2004-08-9	Show	GitHub Exploit DB Packet Storm

345692	-	gnu	cfengine	The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and trigg…	NVD-CWE-Other	CVE-2004-1702	2017-07-11 10:31	2004-08-9	Show	GitHub Exploit DB Packet Storm

345693	-	wire_plastic_design	wpquiz	WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory.	NVD-CWE-Other	CVE-2004-1704	2017-07-11 10:31	2004-07-30	Show	GitHub Exploit DB Packet Storm

345694	-	citadel	ux	Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.	NVD-CWE-Other	CVE-2004-1705	2017-07-11 10:31	2004-07-30	Show	GitHub Exploit DB Packet Storm

345695	-	u.s.robotics	usr808054	The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version s…	NVD-CWE-Other	CVE-2004-1706	2017-07-11 10:31	2004-08-2	Show	GitHub Exploit DB Packet Storm

345696	-	oracle	application_server application_server_portal database_server_lite oracle8i oracle9i	The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, whic…	NVD-CWE-Other	CVE-2004-1707	2017-07-11 10:31	2004-07-30	Show	GitHub Exploit DB Packet Storm

345697	-	shawn_webb	webbsyte_chat	Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections.	NVD-CWE-Other	CVE-2004-1708	2017-07-11 10:31	2004-08-2	Show	GitHub Exploit DB Packet Storm

345698	-	datakey	rainbow_ikey2032_usb_token	Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other user…	NVD-CWE-Other	CVE-2004-1709	2017-07-11 10:31	2004-08-4	Show	GitHub Exploit DB Packet Storm

345699	-	andrew_kilpatrick	page_cgi	page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.	NVD-CWE-Other	CVE-2004-1710	2017-07-11 10:31	2004-08-6	Show	GitHub Exploit DB Packet Storm

345700	-	hp	process_resource_manager workload_manager	Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local users to corrupt data files.	NVD-CWE-Other	CVE-2004-1713	2017-07-11 10:31	2004-08-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed