Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3411 7.2 重要
Network 		boidcms boidcms boidcmsにおけるPHP リモートファイルインクルージョンの脆弱性 CWE-98
PHP リモートファイルインクルージョン 		CVE-2026-39387 2026-04-27 11:21 2026-04-14 Show GitHub Exploit DB Packet Storm
3412 9.9 緊急
Network 		openremote openremote openremoteにおける複数の脆弱性 CWE-917
CWE-94
CVE-2026-39842 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
3413 10 緊急
Network 		Anthropic PBC Claude Code Anthropic PBCのClaude Codeにおける複数の脆弱性 CWE-22
CWE-61
CVE-2026-39861 2026-04-27 11:21 2026-04-21 Show GitHub Exploit DB Packet Storm
3414 8.1 重要
Network 		Suyog Sonwalkar MCP Server Kubernetes Suyog SonwalkarのMCP Server Kubernetesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-39884 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
3415 6.5 警告
Network 		jqlang jq jqlangのjqにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-39979 2026-04-27 11:21 2026-04-13 Show GitHub Exploit DB Packet Storm
3416 5.5 警告
Local 		Linux Foundation Sigstore Timestamp Authority Linux FoundationのSigstore Timestamp Authorityにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-39984 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
3417 7.1 重要
Network 		lfprojects Zarf lfprojectsのZarfにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40090 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
3418 4.4 警告
Local 		Authzed, Inc. SpiceDB Authzed, Inc.のSpiceDBにおけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-40091 2026-04-27 11:21 2026-04-15 Show GitHub Exploit DB Packet Storm
3419 5.4 警告
Network 		OpenMage Magento OpenMageのMagentoにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-40098 2026-04-27 11:21 2026-04-20 Show GitHub Exploit DB Packet Storm
3420 7.5 重要
Network 		free5gc free5gc free5GCにおける複数の脆弱性 CWE-285
CWE-636
CVE-2026-40248 2026-04-27 11:21 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351661 - daniel_barron dansguardian DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request. NVD-CWE-Other
CVE-2004-2282 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351662 - daniel_barron dansguardian Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page to be added to the clean page cache. NVD-CWE-Other
CVE-2004-2283 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351663 - dsm light_web_file_browser Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter. NVD-CWE-Other
CVE-2004-2287 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351664 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter. NVD-CWE-Other
CVE-2004-2288 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351665 - francisco_burzi php-nuke Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences… NVD-CWE-Other
CVE-2004-2294 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351666 - novell internet_messaging_system
netmail 		Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store da… NVD-CWE-Other
CVE-2004-2298 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351667 - mbedthis_software mbedthis_appweb_http_server Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access. NVD-CWE-Other
CVE-2004-2317 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351668 - openbsd openbsd OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions. NVD-CWE-Other
CVE-2004-2338 2008-09-6 05:43 2004-12-31 Show GitHub Exploit DB Packet Storm
351669 - symantec enterprise_firewall
gateway_security 		The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additiona… NVD-CWE-Other
CVE-2004-1754 2008-09-6 05:42 2004-06-15 Show GitHub Exploit DB Packet Storm
351670 - skype_technologies skype A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL,… CWE-20
 Improper Input Validation  		CVE-2004-1777 2008-09-6 05:42 2004-12-31 Show GitHub Exploit DB Packet Storm