Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4731 7.5 重要
Network
Christian Neukirchen Rack Rackにおける複数の脆弱性 CWE-400
CWE-407
CWE-770
CVE-2026-34827 2026-04-27 10:49 2026-04-2 Show GitHub Exploit DB Packet Storm
4732 6.5 警告
Network
Glances project Glances Nicolas Hennion (nicolargo)のGlancesにおける複数の脆弱性 CWE-200
CWE-306
CWE-306
CWE-942
CVE-2026-34839 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
4733 5.7 警告
Network
オラクル PeopleSoft Enterprise CS Student Records オラクルのPeopleSoft Enterprise CS Student Recordsにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35241 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
4734 7.8 重要
Local
オラクル Oracle Application Development Framework (Oracle ADF) オラクルのOracle Application Development Framework (Oracle ADF)におけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35243 2026-04-27 10:49 2026-04-21 Show GitHub Exploit DB Packet Storm
4735 7.5 重要
Network
libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-35405 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
4736 8.2 重要
Network
libp2p libp2p Protocol Labsのlibp2pにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-35457 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
4737 8.8 重要
Network
pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-35463 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
4738 5.3 警告
Network
oobabooga TextGen oobaboogaのTextGenにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-35483 2026-04-27 10:49 2026-04-7 Show GitHub Exploit DB Packet Storm
4739 8.8 重要
Local
NSA Emissary NSAのEmissaryにおける複数の脆弱性 CWE-116
CWE-78
CVE-2026-35582 2026-04-27 10:49 2026-04-18 Show GitHub Exploit DB Packet Storm
4740 6.5 警告
Network
Vikunja Vikunja Vikunjaにおけるセッション期限に関する脆弱性 CWE-613
不適切なセッション期限
CVE-2026-35594 2026-04-27 10:48 2026-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348261 - yabb yabb SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter. NVD-CWE-Other
CVE-2004-0291 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348262 - karjasoft sami_http_server Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2004-0292 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348263 - shopcartcgi shopcartcgi Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi. NVD-CWE-Other
CVE-2004-0293 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348264 - transsoft broker_ftp_server TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection. NVD-CWE-Other
CVE-2004-0295 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348265 - transsoft broker_ftp_server TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection. NVD-CWE-Other
CVE-2004-0296 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348266 - aclogic cesarftp CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter. NVD-CWE-Other
CVE-2004-0298 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348267 - smallftpd smallftpd Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters. NVD-CWE-Other
CVE-2004-0299 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348268 - ecommerce_corporation_online store_kit SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.ph… NVD-CWE-Other
CVE-2004-0300 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348269 - ecommerce_corporation_online store_kit Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter. NVD-CWE-Other
CVE-2004-0301 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348270 - fools_workshop owls_workshop Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile … NVD-CWE-Other
CVE-2004-0302 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm