Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4431 7.5 重要
Network 		libexpat project libexpat libexpat projectのlibexpatにおけるエントロピー不足に関する脆弱性 CWE-331
エントロピー不足 		CVE-2026-41080 2026-04-27 11:20 2026-04-16 Show GitHub Exploit DB Packet Storm
4432 7.5 重要
Network 		free5gc free5gc
pcf 		free5GCのfree5GC等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-41135 2026-04-27 11:20 2026-04-22 Show GitHub Exploit DB Packet Storm
4433 5.3 警告
Network 		free5gc free5gc
amf 		free5GCのamf等の複数製品における予期せぬ動作に関する脆弱性　 CWE-440
予期せぬ動作 		CVE-2026-41136 2026-04-27 11:20 2026-04-22 Show GitHub Exploit DB Packet Storm
4434 8.1 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-4922 2026-04-27 11:20 2026-04-22 Show GitHub Exploit DB Packet Storm
4435 6.1 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-5262 2026-04-27 11:20 2026-04-22 Show GitHub Exploit DB Packet Storm
4436 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-5377 2026-04-27 11:20 2026-04-22 Show GitHub Exploit DB Packet Storm
4437 8.1 重要
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるパスの等価性の不適切な解決に関する脆弱性 CWE-41
パスの等価性の不適切な解決 		CVE-2026-5816 2026-04-27 11:19 2026-04-22 Show GitHub Exploit DB Packet Storm
4438 9.1 緊急
Network 		Rapid7 velociraptor Rapid7のvelociraptorにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-6290 2026-04-27 11:19 2026-04-15 Show GitHub Exploit DB Packet Storm
4439 5.3 警告
Network 		fastify fastify-static fastifyのfastify-staticにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-6410 2026-04-27 11:19 2026-04-16 Show GitHub Exploit DB Packet Storm
4440 5.9 警告
Network 		fastify fastify-static fastifyのfastify-staticにおけるURL エンコーディング（16進エンコーディング）の処理に関する脆弱性 CWE-177
URLエンコーディング（16進エンコーディング）の不適切な処理 		CVE-2026-6414 2026-04-27 11:19 2026-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347461 - microsoft ie Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .p… NVD-CWE-Other
CVE-2004-0985 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
347462 - suse
debian
linux
redhat 		suse_iptables
debian_linux
linux_kernel
fedora_core 		Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote att… NVD-CWE-Other
CVE-2004-0986 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
347463 - proxytunnel proxytunnel Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer. NVD-CWE-Other
CVE-2004-0992 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
347464 - hp sockd Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code. NVD-CWE-Other
CVE-2004-0993 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
347465 - zgv
debian 		xzgv_image_viewer
zgv_image_viewer
debian_linux 		Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demon… NVD-CWE-Other
CVE-2004-0994 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
347466 - cscope
debian
gentoo
sco 		cscope
debian_linux
linux
unixware 		main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2004-0996 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
347467 - telnetd telnetd
telnetd-ssl 		Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0998 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
347468 - zgv zgv_image_viewer zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images. NVD-CWE-Other
CVE-2004-0999 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
347469 - debian lintian lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. NVD-CWE-Other
CVE-2004-1000 2017-07-11 10:30 2004-01-10 Show GitHub Exploit DB Packet Storm
347470 - trend_micro scanmail_domino Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file. NVD-CWE-Other
CVE-2004-1003 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm