Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3701	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける複数の脆弱性	CWE-306 CWE-78	CVE-2026-41179	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3702	9.9	緊急 Network	Froxlor	Froxlor	FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2026-41228	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3703	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3704	8.5	重要 Network	Froxlor	Froxlor	FroxlorにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-41230	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3705	7.5	重要 Network	Froxlor	Froxlor	Froxlorにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41231	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3706	5	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41232	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3707	5.4	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41233	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3708	8.6	重要 Local	OpenClaw	OpenClaw	OpenClawにおけるシステム構成または設定の外部制御に関する脆弱性	CWE-15 システム構成または設定の外部制御	CVE-2026-41294	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3709	7.8	重要 Local	OpenClaw	OpenClaw	OpenClawにおける信頼できない制御領域からの機能の組み込みに関する脆弱性	CWE-829 信頼性のない制御領域からの機能の組み込み	CVE-2026-41295	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

3710	8.2	重要 Network	OpenClaw	OpenClaw	OpenClawにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41296	2026-04-30 12:26	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346481	-	massive_entertainment	ground_control_ii_operation_exodus	Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket err…	NVD-CWE-Other	CVE-2004-1751	2017-07-11 10:31	2004-08-26	Show	GitHub Exploit DB Packet Storm

346482	-	-	-	Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.	NVD-CWE-Other	CVE-2004-1752	2017-07-11 10:31	2004-08-24	Show	GitHub Exploit DB Packet Storm

346483	-	mozilla netscape	firefox mozilla navigator	The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allo…	NVD-CWE-Other	CVE-2004-1753	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346484	-	-	-	The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after th…	NVD-CWE-Other	CVE-2004-1755	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346485	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejec…	NVD-CWE-Other	CVE-2004-1756	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

346486	-	bea	weblogic_server	BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2004-1757	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346487	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in co…	NVD-CWE-Other	CVE-2004-1758	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

346488	-	cisco ibm	emergency_responder ip_call_center_express_enhanced ip_call_center_express_standard ip_interactive_voice_response personal_assistant director_agent call_manager internet_service_…	Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 1…	CWE-399 Resource Management Errors	CVE-2004-1759	2017-07-11 10:31	2004-01-21	Show	GitHub Exploit DB Packet Storm

346489	-	cisco ibm	emergency_responder ip_call_center_express_enhanced ip_call_center_express_standard ip_interactive_voice_response personal_assistant director_agent call_manager internet_service_…	The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain adminis…	CWE-287 Improper Authentication	CVE-2004-1760	2017-07-11 10:31	2004-01-21	Show	GitHub Exploit DB Packet Storm

346490	-	f-secure	f-secure_anti-virus	Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.	NVD-CWE-Other	CVE-2004-1762	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed