Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
31 4 警告
Network
Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション
CVE-2026-43968 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
32 3.2
Local
Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 New CWE-93
CRLF インジェクション
CVE-2026-43969 2026-05-25 10:24 2026-05-11 Show GitHub Exploit DB Packet Storm
33 6.1 警告
Network
Boscop Orejime GayaのOrejimeにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-6095 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
34 6.1 警告
Network
Drupal Obfuscate Obfuscateにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-6871 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
35 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2025-71266 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
36 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 New CWE-835
無限ループ
CVE-2025-71267 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
37 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 New CWE-401
有効期限後のメモリの解放の欠如
CVE-2025-71268 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
38 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2025-71269 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
39 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 New CWE-noinfo
情報不足
CVE-2025-71270 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
40 6.5 警告
Network
Splunk splunk cloud platform
Splunk
SplunkのSplunk等の複数製品におけるログファイルからの情報漏えいに関する脆弱性 New CWE-532
ログファイルからの情報漏えい
CVE-2026-20239 2026-05-25 10:24 2026-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345881 - zonelabs zonealarm ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters. NVD-CWE-Other
CVE-2004-1936 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345882 - nuked-klan nuked-klan Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2… NVD-CWE-Other
CVE-2004-1937 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
345883 - phorum phorum SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", a… NVD-CWE-Other
CVE-2004-1938 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345884 - rhinosoft zaep_antispam Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter. NVD-CWE-Other
CVE-2004-1939 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345885 - fastream netfile_ftp_web_server Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist. NVD-CWE-Other
CVE-2004-1941 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345886 - sun patch_manager The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypca… NVD-CWE-Other
CVE-2004-1942 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345887 - phpbb_group phpbb PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NVD-CWE-Other
CVE-2004-1943 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm
345888 - qualcomm eudora Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message. NVD-CWE-Other
CVE-2004-1944 2017-07-11 10:31 2004-04-14 Show GitHub Exploit DB Packet Storm
345889 - kinesphere_corporation exchange_pop3 Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field. NVD-CWE-Other
CVE-2004-1945 2017-07-11 10:31 2004-04-20 Show GitHub Exploit DB Packet Storm
345890 - cherokee cherokee_httpd Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C comm… NVD-CWE-Other
CVE-2004-1946 2017-07-11 10:31 2004-04-19 Show GitHub Exploit DB Packet Storm