Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3631 5.8 警告
Network
Pavel Zbornik (pavelzbornik) whisperX REST API Pavel Zbornik (pavelzbornik)のwhisperX REST APIにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-34981 2026-04-30 12:13 2026-04-6 Show GitHub Exploit DB Packet Storm
3632 7.5 重要
Network
Distribution Distribution Distributionにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-35172 2026-04-30 12:13 2026-04-6 Show GitHub Exploit DB Packet Storm
3633 7.5 重要
Network
UnJS Team defu UnJS Teamのdefuにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)
CVE-2026-35209 2026-04-30 12:13 2026-04-6 Show GitHub Exploit DB Packet Storm
3634 7.5 重要
Network
オラクル Oracle Financial Services Transaction Filtering オラクルのOracle Financial Services Transaction Filteringにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35231 2026-04-30 12:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3635 6.3 警告
Local
Flatpak XDG Desktop Portal (xdg-desktop-portal) FlatpakのXDG Desktop Portal (xdg-desktop-portal)におけるUNIX Symbolic Link のフォローに関する脆弱性 CWE-61
UNIX Symbolic Link のフォロー
CVE-2026-40354 2026-04-30 12:13 2026-04-11 Show GitHub Exploit DB Packet Storm
3636 5.3 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-40448 2026-04-30 12:13 2026-04-22 Show GitHub Exploit DB Packet Storm
3637 6.6 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-40449 2026-04-30 12:13 2026-04-22 Show GitHub Exploit DB Packet Storm
3638 6.6 警告
Local
Veeam one サムスンのOneにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2026-40450 2026-04-30 12:13 2026-04-22 Show GitHub Exploit DB Packet Storm
3639 8.2 重要
Network
UltraDAG UltraDAG UltraDAGにおける複数の脆弱性 CWE-460
CWE-696
CVE-2026-40583 2026-04-30 12:13 2026-04-21 Show GitHub Exploit DB Packet Storm
3640 7.5 重要
Network
RansomLook RansomLook RansomLookにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-40584 2026-04-30 12:13 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346521 - tripwire tripwire Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file na… NVD-CWE-Other
CVE-2004-0536 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346522 - oracle applications
e-business_suite
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries. NVD-CWE-Other
CVE-2004-0543 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346523 - ibm aix Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands. NVD-CWE-Other
CVE-2004-0544 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346524 - ibm aix LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2004-0545 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346525 - postgresql postgresql Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash). NVD-CWE-Other
CVE-2004-0547 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346526 - realnetworks realplayer Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters. NVD-CWE-Other
CVE-2004-0550 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346527 - sophos small_business_suite Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow m… NVD-CWE-Other
CVE-2004-0552 2017-07-11 10:30 2004-11-3 Show GitHub Exploit DB Packet Storm
346528 - gnu queue Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0555 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
346529 - cisco catos
catalyst_2901
catalyst_2902
catalyst_2926
catalyst_2926f
catalyst_2926gl
catalyst_2926gs
catalyst_2926t
catalyst_2948
catalyst_2948-ge-tx
catalyst_2948g-l3
cata…
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid… NVD-CWE-Other
CVE-2004-0551 2017-07-11 10:30 2004-08-6 Show GitHub Exploit DB Packet Storm
346530 - usermin
webmin
mandrakesoft
usermin
webmin
mandrake_linux
mandrake_linux_corporate_server
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory. NVD-CWE-Other
CVE-2004-0559 2017-07-11 10:30 2004-10-20 Show GitHub Exploit DB Packet Storm