Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3841	9.9	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-40453	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3842	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40473	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3843	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40858	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3844	9.8	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40860	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3845	7.7	重要 Network	argoproj	Argo Workflows	Argo Project AuthorsのArgo Workflowsにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40886	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3846	5.3	警告 Adjacent	opentelemetry	opentelemetry	opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-40891	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3847	7.8	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40915	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3848	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40916	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3849	7.1	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40917	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3850	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性	CWE-131 正しくないバッファサイズ計算	CVE-2026-40918	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346691	-	francisco_burzi	php-nuke	The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message.	NVD-CWE-Other	CVE-2004-2019	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346692	-	activestate	activeperl	ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a l…	NVD-CWE-Other	CVE-2004-2022	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346693	-	apsis	pound	Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.	NVD-CWE-Other	CVE-2004-2026	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

346694	-	icecast	icecast	Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read.	NVD-CWE-Other	CVE-2004-2027	2017-07-11 10:31	2004-05-10	Show	GitHub Exploit DB Packet Storm

346695	-	e107	e107	Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.	NVD-CWE-Other	CVE-2004-2028	2017-07-11 10:31	2004-05-21	Show	GitHub Exploit DB Packet Storm

346696	-	trevor_hogan	bnbt	The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a "…	NVD-CWE-Other	CVE-2004-2029	2017-07-11 10:31	2004-05-22	Show	GitHub Exploit DB Packet Storm

346697	-	liferay	liferay_enterprise_portal	Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the me…	CWE-79 Cross-site Scripting	CVE-2004-2030	2017-07-11 10:31	2004-05-22	Show	GitHub Exploit DB Packet Storm

346698	-	e107	e107	Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.	NVD-CWE-Other	CVE-2004-2031	2017-07-11 10:31	2004-05-21	Show	GitHub Exploit DB Packet Storm

346699	-	netgear	rp114	Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 (hex-encoded space) sequences.	NVD-CWE-Other	CVE-2004-2032	2017-07-11 10:31	2004-05-24	Show	GitHub Exploit DB Packet Storm

346700	-	orenosv	orenosv_http_ftp_server	Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.	NVD-CWE-Other	CVE-2004-2033	2017-07-11 10:31	2004-05-26	Show	GitHub Exploit DB Packet Storm