Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4771	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2016 Microsoft Windows Server 2025 Microsoft Windows Server 2019 Microsoft Windows Server 2022 Microso…	リモートアクセス管理サービス/API (RPC サーバー) の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-26183	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4772	7.8	重要 Local	マイクロソフト	Microsoft Windows Server 2019 Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 1809 Microsoft Wind…	Windows Projected File System の特権の昇格の脆弱性	CWE-126 バッファオーバーリード	CVE-2026-26184	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4773	4.4	警告 Local	マイクロソフト	Microsoft Windows 11 23h2 Microsoft Windows 11 26h1 Microsoft Windows 10 22h2 Microsoft Windows 10 21h2 Microsoft Windows&…	Windows Hello のセキュリティ機能のバイパスの脆弱性	CWE-20 不適切な入力確認	CVE-2026-27906	2026-04-27 11:23	2026-04-14	Show	GitHub Exploit DB Packet Storm

4774	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-30997	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4775	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-30998	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4776	7.5	重要 Network	FFmpeg	FFmpeg	FFmpegにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-30999	2026-04-27 11:23	2026-04-13	Show	GitHub Exploit DB Packet Storm

4777	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性	CWE-284 CWE-94	CVE-2026-31018	2026-04-27 11:23	2026-04-21	Show	GitHub Exploit DB Packet Storm

4778	8.8	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-31019	2026-04-27 11:22	2026-04-21	Show	GitHub Exploit DB Packet Storm

4779	3.5	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるレンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限に関する脆弱性	CWE-1021 レンダリングされたユーザインターフェースレイヤまたはフレームの不適切な制限	CVE-2026-3254	2026-04-27 11:22	2026-04-22	Show	GitHub Exploit DB Packet Storm

4780	9.9	緊急 Network	Linux Foundation	Spinnaker	Linux FoundationのSpinnakerにおける入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-32604	2026-04-27 11:22	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347791	-	mywebserver	mywebserver	MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.	NVD-CWE-Other	CVE-2004-1556	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347792	-	mywebserver	mywebserver	MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.	NVD-CWE-Other	CVE-2004-1557	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347793	-	ypops	ypops	Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USE…	NVD-CWE-Other	CVE-2004-1558	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347794	-	wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to…	NVD-CWE-Other	CVE-2004-1559	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347795	-	microsoft	sql_server	Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.	NVD-CWE-Other	CVE-2004-1560	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347796	-	icecast	icecast	Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.	NVD-CWE-Other	CVE-2004-1561	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347797	-	w-agora	w-agora	SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter.	NVD-CWE-Other	CVE-2004-1562	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347798	-	w-agora	w-agora	Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser…	NVD-CWE-Other	CVE-2004-1563	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347799	-	w-agora	w-agora	CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the threa…	NVD-CWE-Other	CVE-2004-1564	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347800	-	silent-storm	silent-storm_portal	Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.	NVD-CWE-Other	CVE-2004-1566	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed