Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
371	6.5	警告 Network	getkirby	kirby	getkirbyのkirbyにおける複数の脆弱性	CWE-862 CWE-863	CVE-2026-42137	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

372	7.8	重要 Local	Nullsoft	Nullsoft Scriptable Install System	NullsoftのNullsoft Scriptable Install Systemにおける制御されていない検索パスの要素に関する脆弱性	CWE-427 制御されていない検索パスの要素	CVE-2026-42171	2026-05-20 13:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

373	4.3	警告 Network	getkirby	kirby	getkirbyのkirbyにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-42174	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

374	7.5	重要 Network	OpenBao	OpenBao	OpenBaoにおける保存または転送前の重要な情報の削除に関する脆弱性	CWE-212 保存または転送前の重要な情報の不適切な削除	CVE-2026-42186	2026-05-20 13:30	2026-05-14	Show	GitHub Exploit DB Packet Storm

375	7.5	重要 Network	Ruby-lang.org	Net::IMAP	Ruby-lang.orgのNet::IMAPにおけるアルゴリズムの複雑さに関する脆弱性	CWE-407 アルゴリズムの複雑性	CVE-2026-42245	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

376	7.4	重要 Network	Ruby-lang.org	Net::IMAP	Ruby-lang.orgのNet::IMAPにおける複数の脆弱性	CWE-392 CWE-393 CWE-636 CWE-754 CWE-841	CVE-2026-42246	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

377	9.8	緊急 Network	ollama	ollama	Ollamaにおけるダウンロードしたコードの完全性検証不備に関する脆弱性	CWE-494 ダウンロードしたコードの完全性検証不備	CVE-2026-42248	2026-05-20 13:30	2026-04-29	Show	GitHub Exploit DB Packet Storm

378	9.8	緊急 Network	ollama	ollama	Ollamaにおける複数の脆弱性	CWE-22 CWE-494	CVE-2026-42249	2026-05-20 13:30	2026-04-29	Show	GitHub Exploit DB Packet Storm

379	9.8	緊急 Network	Ruby-lang.org	Net::IMAP	Ruby-lang.orgのNet::IMAPにおける複数の脆弱性	CWE-77 CWE-93	CVE-2026-42257	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

380	9.8	緊急 Network	Ruby-lang.org	Net::IMAP	Ruby-lang.orgのNet::IMAPにおける複数の脆弱性	CWE-77 CWE-93	CVE-2026-42258	2026-05-20 13:30	2026-05-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345941	-	inter7	sqwebmail	This vulnerability is addressed in the following product release: Inter7, SqWebMail, 4.0.5	NVD-CWE-Other	CVE-2004-0591	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

345942	-	suse	suse_linux	The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denia…	NVD-CWE-Other	CVE-2004-0592	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

345943	-	sygate_technologies	enforcer secure_enterprise	Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.	NVD-CWE-Other	CVE-2004-0593	2017-07-11 10:30	2004-09-28	Show	GitHub Exploit DB Packet Storm

345944	-	distcc	distcc	distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.	NVD-CWE-Other	CVE-2004-0601	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

345945	-	freebsd	freebsd	The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system p…	NVD-CWE-Other	CVE-2004-0602	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345946	-	gnu	gzip	gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary …	NVD-CWE-Other	CVE-2004-0603	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345947	-	gift-fasttrack gentoo	gift-fasttrack linux	The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.	NVD-CWE-Other	CVE-2004-0604	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345948	-	ircd-hybrid ircd-ratbox	ircd-hybrid ircd-ratbox	Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote a…	CWE-16 Configuration	CVE-2004-0605	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345949	-	infoblox	dns_one_appliance	Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTN…	NVD-CWE-Other	CVE-2004-0606	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345950	-	arush dreamforge epic_games infogrames ion_storm nerf_arena_blast rage_software robert_jordan running_with_scissors gentoo	devastation tnn_outdoors_pro_hunter unreal_engine unreal_tournament unreal_tournament_2003 unreal_tournament_2004 tacticalops x-com_enforcer deusex nerf_arena_blast mobi…	The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earli…	NVD-CWE-Other	CVE-2004-0608	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed