Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4661	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-23415	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

4662	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23416	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

4663	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23417	2026-04-27 10:52	2026-04-2	Show	GitHub Exploit DB Packet Storm

4664	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-23418	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

4665	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-23419	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

4666	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおけるリソースのロックに関する脆弱性	CWE-667 不適切なロック	CVE-2026-23420	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

4667	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-23421	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

4668	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-23422	2026-04-27 10:52	2026-04-3	Show	GitHub Exploit DB Packet Storm

4669	5.7	警告 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 11 23h2 Microsoft …	Windows 仮想化ベースセキュリティ (VBS) のセキュリティ機能バイパスの脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-23670	2026-04-27 10:52	2026-04-14	Show	GitHub Exploit DB Packet Storm

4670	7	重要 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025 Microsoft Windows 11 24h2 Microsoft Wind…	AppLocker フィルタードライバー (applockerfltr.sys) の特権昇格の脆弱性	CWE-362 競合状態	CVE-2026-25184	2026-04-27 10:52	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347561	-	crackalaka	crackalaka	The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings.	NVD-CWE-Other	CVE-2004-1919	2017-07-11 10:31	2004-04-9	Show	GitHub Exploit DB Packet Storm

347562	-	x-micro	wlan_11b_broadband_router_firmware	X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1920	2017-07-11 10:31	2004-04-10	Show	GitHub Exploit DB Packet Storm

347563	-	x-micro	wlan_11b_broadband_router_firmware	X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1921	2017-07-11 10:31	2004-04-10	Show	GitHub Exploit DB Packet Storm

347564	-	tiki	tikiwiki_cms\/groupware	Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_director…	CWE-200 Information Exposure	CVE-2004-1923	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

347565	-	tiki	tikiwiki_cms\/groupware	Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (…	CWE-22 Path Traversal	CVE-2004-1927	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

347566	-	tiki	tikiwiki_cms\/groupware	Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to…	CWE-79 Cross-site Scripting	CVE-2004-1924	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

347567	-	tiki	tikiwiki_cms\/groupware	Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php…	CWE-89 SQL Injection	CVE-2004-1925	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

347568	-	tiki	tikiwiki_cms\/groupware	The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.	CWE-20 Improper Input Validation	CVE-2004-1928	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

347569	-	francisco_burzi	php-nuke	SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code …	NVD-CWE-Other	CVE-2004-1929	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

347570	-	francisco_burzi	php-nuke	Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTM…	NVD-CWE-Other	CVE-2004-1930	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed