Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4381 4.3 警告
Network 		Weblate Weblate Weblateにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-44264 2026-05-12 10:19 2026-05-7 Show GitHub Exploit DB Packet Storm
4382 9.1 緊急
Network 		ollama ollama Ollamaにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-7482 2026-05-12 10:19 2026-05-4 Show GitHub Exploit DB Packet Storm
4383 5.5 警告
Local 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8119 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4384 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8120 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4385 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8121 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4386 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8122 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4387 6.5 警告
Network 		Open5GS Open5GS Open5GSにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース 		CVE-2026-8123 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4388 8.8 重要
Network 		Shenzhen Tenda Technology Co.,Ltd. CX12L Pro Firmware Shenzhen Tenda Technology Co.,Ltd.のCX12L Pro Firmwareにおける複数の脆弱性 CWE-119
CWE-121
CVE-2026-8138 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4389 7.8 重要
Local 		NAVER Corp. NAVER MYBOX Explorer for Windows NAVER Corp.のNAVER MYBOX Explorer for Windowsにおける不適切な権限設定に関する脆弱性 CWE-266
不適切な権限設定 		CVE-2026-8148 2026-05-12 10:19 2026-05-8 Show GitHub Exploit DB Packet Storm
4390 7.3 重要
Network 		Project Jupyter Jupyter Server Project JupyterのJupyter Serverにおけるアンカーのない正規表現に関する脆弱性 CWE-777
アンカーのない正規表現 		CVE-2026-40110 2026-05-12 10:19 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345801 - mozilla firefox
mozilla 		Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers… NVD-CWE-Other
CVE-2004-1381 2017-10-11 10:29 2004-10-20 Show GitHub Exploit DB Packet Storm
345802 - php php PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function. NVD-CWE-Other
CVE-2004-1392 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345803 - gnu glibc GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive i… NVD-CWE-Other
CVE-2004-1453 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345804 - full_revolution aspwebcalendar SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp. NVD-CWE-Other
CVE-2004-1552 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345805 - fullrevolution aspwebalbum SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it wa… CWE-89
SQL Injection 		CVE-2004-1553 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345806 - mozilla
sgi
redhat 		mozilla
propack
enterprise_linux
enterprise_linux_desktop
fedora_core
linux
linux_advanced_workstation 		Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG… NVD-CWE-Other
CVE-2004-1613 2017-10-11 10:29 2004-10-18 Show GitHub Exploit DB Packet Storm
345807 - hp hp-ux Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors. NVD-CWE-Other
CVE-2004-1764 2017-10-11 10:29 2004-01-14 Show GitHub Exploit DB Packet Storm
345808 - gnu sharutils Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument. NVD-CWE-Other
CVE-2004-1772 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345809 - gnu sharutils Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar. NVD-CWE-Other
CVE-2004-1773 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345810 - beasts vsftpd vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant. NVD-CWE-Other
CVE-2004-2259 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm