Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4451 9.8 緊急
Network 		WWBN AVideo WWBNのAVideoにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-41304 2026-04-27 10:46 2026-04-22 Show GitHub Exploit DB Packet Storm
4452 4.3 警告
Network 		pretix pretix pretix GmbHのpretixにおける隔離または分類に関する脆弱性 CWE-653
不適切な隔離または分類 		CVE-2026-5600 2026-04-27 10:46 2026-04-8 Show GitHub Exploit DB Packet Storm
4453 7.2 重要
Network 		mintplexlabs anythingllm mintplexlabsのanythingllmにおけるパストラバーサルの脆弱性 CWE-29
パストラバーサル (/../filename) 		CVE-2026-5627 2026-04-27 10:46 2026-04-7 Show GitHub Exploit DB Packet Storm
4454 9.6 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-6919 2026-04-27 10:46 2026-04-23 Show GitHub Exploit DB Packet Storm
4455 9.6 緊急
Network 		Google Google Chrome GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-6920 2026-04-27 10:45 2026-04-23 Show GitHub Exploit DB Packet Storm
4456 8.3 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-6921 2026-04-27 10:45 2026-04-23 Show GitHub Exploit DB Packet Storm
4457 - - 三菱電機 MELSEC iQ-F FX5-EIP形EtherNet/IPユニット
MELSEC iQ-Fシリーズ FX5-ENET/IP形Ethernetユニット 		MELSEC iQ-FシリーズのEtherNet/IPユニットおよびEthernetユニットのEthernet機能における複数の脆弱性 CWE-404
CWE-670
CVE-2026-1874
CVE-2026-1875
CVE-2026-1876 		2026-04-24 17:45 2026-03-3 Show GitHub Exploit DB Packet Storm
4458 5.4 警告
Network 		Apache Software Foundation Apache ActiveMQ
Apache ActiveMQ MQTT 		Apache ActiveMQシリーズにおけるMQTTパケット検証不備の脆弱性［AMQ-9810］ CWE-Other
その他 		CVE-2025-66168
CVE-2026-40046 		2026-04-24 12:11 2026-03-4 Show GitHub Exploit DB Packet Storm
4459 9.1 緊急
Network 		oauth2_proxy project oauth2_proxy oauth2_proxy projectのoauth2_proxyにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避 		CVE-2026-34457 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
4460 5.9 警告
Network 		OpenClaw OpenClaw OpenClawにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-34511 2026-04-24 11:44 2026-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347991 - mozilla bonsai Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the fil… NVD-CWE-Other
CVE-2003-0154 2016-10-18 11:30 2003-04-2 Show GitHub Exploit DB Packet Storm
347992 - cross_referencer lxr Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter. NVD-CWE-Other
CVE-2003-0156 2016-10-18 11:30 2003-03-24 Show GitHub Exploit DB Packet Storm
347993 - gaim-encryption gaim-encryption decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service (crash) via a negati… NVD-CWE-Other
CVE-2003-0163 2016-10-18 11:30 2003-05-5 Show GitHub Exploit DB Packet Storm
347994 - hp instant_toptools hpnst.exe in the GoAhead-Webs webserver for HP Instant TopTools before 5.55 allows remote attackers to cause a denial of service (CPU consumption) via a request to hpnst.exe that calls itself, which … NVD-CWE-Other
CVE-2003-0169 2016-10-18 11:30 2003-04-11 Show GitHub Exploit DB Packet Storm
347995 - borland_software
firebirdsql 		interbase
firebird 		Buffer overflow gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK). NVD-CWE-Other
CVE-2003-0197 2016-10-18 11:30 2003-04-11 Show GitHub Exploit DB Packet Storm
347996 - kde kde KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, related to missing -dPARANOIDSAFER and -dSAFER arguments when usi… NVD-CWE-Other
CVE-2003-0204 2016-10-18 11:30 2003-05-5 Show GitHub Exploit DB Packet Storm
347997 - gkrellm_newsticker gkrellm_newsticker gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI. NVD-CWE-Other
CVE-2003-0205 2016-10-18 11:30 2003-05-12 Show GitHub Exploit DB Packet Storm
347998 - gkrellm_newsticker gkrellm_newsticker gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to cause a denial of service (crash) via (1) link or (2) title elements that contain multiple lines. NVD-CWE-Other
CVE-2003-0206 2016-10-18 11:30 2003-05-12 Show GitHub Exploit DB Packet Storm
347999 - macromedia flash Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascript via the clickTAG field. NVD-CWE-Other
CVE-2003-0208 2016-10-18 11:30 2003-05-5 Show GitHub Exploit DB Packet Storm
348000 - smoothwall
sourcefire 		smoothwall
snort 		Integer overflow in the TCP stream reassembly module (stream4) for Snort 2.0 and earlier allows remote attackers to execute arbitrary code via large sequence numbers in packets, which enable a heap-b… NVD-CWE-Other
CVE-2003-0209 2016-10-18 11:30 2003-05-5 Show GitHub Exploit DB Packet Storm