Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4751 8.1 重要
Network 		SysAdmins Media HomeBox SysAdmins MediaのHomeBoxにおける不適切な所有権の割り当てに関する脆弱性 CWE-708
不適切な所有権の割り当て 		CVE-2026-40196 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4752 2.7 低
Network 		OpenBao OpenBao OpenBaoにおけるセキュリティトークンの割り当ての制限に関する脆弱性 CWE-1259
セキュリティトークンの割り当ての不適切な制限 		CVE-2026-40264 2026-04-27 10:48 2026-04-21 Show GitHub Exploit DB Packet Storm
4753 4.3 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-40305 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4754 6.5 警告
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-40306 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4755 8 重要
Network 		dnnsoftware dotnetnuke dnnsoftwareのdotnetnukeにおける代替 XSS 構文の不適切な無効化に関する脆弱性 CWE-87
代替 XSS 構文の不適切な無効化 		CVE-2026-40321 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4756 5.3 警告
Network 		The FastAPI Expert python-multipart The FastAPI Expertのpython-multipartにおける複数の脆弱性 CWE-400
CWE-834
CVE-2026-40347 2026-04-27 10:48 2026-04-18 Show GitHub Exploit DB Packet Storm
4757 5.4 警告
Network 		wger wger wger Projectのwgerにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40353 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4758 7.6 重要
Network 		wger wger wger Projectのwgerにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-40474 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4759 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40477 2026-04-27 10:48 2026-04-17 Show GitHub Exploit DB Packet Storm
4760 9 緊急
Network 		Thymeleaf Thymeleaf Thymeleafにおける複数の脆弱性 CWE-1336
CWE-917
CVE-2026-40478 2026-04-27 10:47 2026-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348251 - microsoft mn-500_wireless_base_station The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections. NVD-CWE-Other
CVE-2004-0610 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348252 - netgear fvs318 Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections. NVD-CWE-Other
CVE-2004-0611 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348253 - zonelabs zonealarm The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has … NVD-CWE-Other
CVE-2004-0612 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348254 - osticket osticket_sts osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory. NVD-CWE-Other
CVE-2004-0613 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348255 - osticket osticket_sts osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size. NVD-CWE-Other
CVE-2004-0614 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348256 - bt voyager_2000_wireless_adsl_router The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext. NVD-CWE-Other
CVE-2004-0616 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348257 - arbitroweb arbitroweb Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter. NVD-CWE-Other
CVE-2004-0617 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348258 - freebsd freebsd FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument. NVD-CWE-Other
CVE-2004-0618 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348259 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. NVD-CWE-Other
CVE-2004-0620 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
348260 - zaireweb_solutions newsletter_zws admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and the… NVD-CWE-Other
CVE-2004-0621 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm