Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
401 7.8 重要
Local 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-37526 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
402 9.8 緊急
Network 		Linux Foundation Automotive Grade Linux Linux FoundationのAutomotive Grade Linuxにおける複数の脆弱性 New CWE-22
CWE-367
CVE-2026-37531 2026-05-20 13:20 2026-05-1 Show GitHub Exploit DB Packet Storm
403 6.5 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-40016 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
404 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるアクセス制御に関する脆弱性 New CWE-284
CWE-noinfo
CVE-2026-40020 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
405 7.8 重要
Local 		マイクロソフト Azure Connected Machine Agent Azure Connected Machine Agent の特権の昇格の脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-40381 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
406 9.8 緊急
Network 		エレコム株式会社 WRC-XE5400GS-G
WRC-BE72XSD-B
WAB-BE72-M
WRC-X1800GS-B
WRC-BE65QSD-B
WRC-X6000QSA-G
WRC-X3000GS2A-B
WRC-W702-B
WRC-X6000XS-G
WAB-BE36-M
WRC-X6000XST-G
WRC-X3000GS2-B 		エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性（2026年5月） Update CWE-78
CWE-79
CWE-Other
CVE-2026-25107
CVE-2026-35506
CVE-2026-40621
CVE-2026-42062
CVE-2026-42948
CVE-2026-42950
CVE-2026-42961 		2026-05-19 17:24 2026-05-12 Show GitHub Exploit DB Packet Storm
407 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月14日） - - 2026-05-18 14:06 2026-05-15 Show GitHub Exploit DB Packet Storm
408 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71297 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
409 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71298 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
410 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71299 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346041 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. NVD-CWE-Other
CVE-2004-1004 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
346042 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. NVD-CWE-Other
CVE-2004-1005 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
346043 - isc dhcpd Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702. NVD-CWE-Other
CVE-2004-1006 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
346044 - bogofilter
ubuntu 		email_filter
ubuntu_linux 		The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a n… NVD-CWE-Other
CVE-2004-1007 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
346045 - putty
tortoisecvs 		putty
tortoisecvs 		Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads… NVD-CWE-Other
CVE-2004-1008 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346046 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors. NVD-CWE-Other
CVE-2004-1009 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
346047 - carnegie_mellon_university
openpkg
conectiva
redhat
trustix
ubuntu 		cyrus_imap_server
openpkg
linux
fedora_core
secure_linux
ubuntu_linux 		Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN comman… NVD-CWE-Other
CVE-2004-1011 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346048 - carnegie_mellon_university
openpkg
conectiva
redhat
trustix
ubuntu 		cyrus_imap_server
openpkg
linux
fedora_core
secure_linux
ubuntu_linux 		The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a dif… NVD-CWE-Other
CVE-2004-1012 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346049 - carnegie_mellon_university
redhat
ubuntu 		cyrus_imap_server
fedora_core
ubuntu_linux 		Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004… NVD-CWE-Other
CVE-2004-1015 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
346050 - php php The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vu… NVD-CWE-Other
CVE-2004-1020 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm