Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3741	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35170	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

3742	7.1	重要 Local	Gwenhael Goavec-Merou (trabucayre)	openFPGALoader	Gwenhael Goavec-Merou (trabucayre)のopenFPGALoaderにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-35176	2026-04-30 12:08	2026-04-6	Show	GitHub Exploit DB Packet Storm

3743	6.5	警告 Network	Coder	Code Extension Marketplace	CoderのCode Extension Marketplaceにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-35454	2026-04-30 12:07	2026-04-6	Show	GitHub Exploit DB Packet Storm

3744	9.8	緊急 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-35503	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

3745	8.1	重要 Network	SenseLive	X3500 Firmware	SenseLiveのX3500 Firmwareにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-39462	2026-04-30 12:07	2026-04-24	Show	GitHub Exploit DB Packet Storm

3746	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-31509	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

3747	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-31510	2026-04-30 11:07	2026-04-22	Show	GitHub Exploit DB Packet Storm

3748	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-31511	2026-04-30 11:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

3749	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-31512	2026-04-30 11:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

3750	8.1	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-31513	2026-04-30 11:06	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346611	-	tiki	tikiwiki_cms\/groupware	Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_director…	CWE-200 Information Exposure	CVE-2004-1923	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

346612	-	tiki	tikiwiki_cms\/groupware	Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (…	CWE-22 Path Traversal	CVE-2004-1927	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

346613	-	tiki	tikiwiki_cms\/groupware	Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to…	CWE-79 Cross-site Scripting	CVE-2004-1924	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

346614	-	tiki	tikiwiki_cms\/groupware	Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php…	CWE-89 SQL Injection	CVE-2004-1925	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

346615	-	tiki	tikiwiki_cms\/groupware	The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.	CWE-20 Improper Input Validation	CVE-2004-1928	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

346616	-	francisco_burzi	php-nuke	SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code …	NVD-CWE-Other	CVE-2004-1929	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

346617	-	francisco_burzi	php-nuke	Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTM…	NVD-CWE-Other	CVE-2004-1930	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

346618	-	francisco_burzi	php-nuke	SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded …	NVD-CWE-Other	CVE-2004-1932	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

346619	-	-	-	Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.	NVD-CWE-Other	CVE-2004-1933	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

346620	-	isesam	gemitel	PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.	NVD-CWE-Other	CVE-2004-1934	2017-07-11 10:31	2004-04-15	Show	GitHub Exploit DB Packet Storm