Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3391 7.5 重要
Network 		getkirby kirby getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2026-32870 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3392 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33076 2026-04-30 12:31 2026-04-24 Show GitHub Exploit DB Packet Storm
3393 7.5 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-33077 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3394 9.8 緊急
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-33078 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3395 8.8 重要
Network 		Roxy-WI Roxy-WI Roxy-WIにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-33208 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
3396 7.5 重要
Network 		PowerDNS dnsdist PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33254 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
3397 7.5 重要
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33256 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
3398 7.5 重要
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-33258 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
3399 5 警告
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-33259 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
3400 5.9 警告
Network 		PowerDNS PowerDNS Recursor PowerDNSのPowerDNS Recursorにおける完全性チェックの欠如に関する脆弱性 CWE-353
完全性チェックの欠如 		CVE-2026-33261 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346271 - scripts_for_educators sillysearch Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. NVD-CWE-Other
CVE-2004-2468 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346272 - brickhost phpscheduleit Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations. NVD-CWE-Other
CVE-2004-2469 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346273 - madbms madbms Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins. NVD-CWE-Other
CVE-2004-2470 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346274 - jamesoff quoteengine SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors. NVD-CWE-Other
CVE-2004-2471 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346275 - agnitum outpost_firewall Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro. NVD-CWE-Other
CVE-2004-2472 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346276 - wmfrog wmfrog wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. CWE-59
Link Following 		CVE-2004-2473 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346277 - phpnews phpnews SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php. NVD-CWE-Other
CVE-2004-2474 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346278 - google toolbar Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section. NOTE: some followup posts suggest tha… NVD-CWE-Other
CVE-2004-2475 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346279 - diamondcs process_guard_free DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the origi… NVD-CWE-Other
CVE-2004-2477 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
346280 - national_science_foundation squid_web_proxy_cache Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer. NVD-CWE-Other
CVE-2004-2480 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm