Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4801	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-6919	2026-04-27 10:46	2026-04-23	Show	GitHub Exploit DB Packet Storm

4802	9.6	緊急 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-6920	2026-04-27 10:45	2026-04-23	Show	GitHub Exploit DB Packet Storm

4803	8.3	重要 Network	Google	Google Chrome	GoogleのGoogle Chromeにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-6921	2026-04-27 10:45	2026-04-23	Show	GitHub Exploit DB Packet Storm

4804	-	-	三菱電機	MELSEC iQ-F FX5-EIP形EtherNet/IPユニット MELSEC iQ-Fシリーズ FX5-ENET/IP形Ethernetユニット	MELSEC iQ-FシリーズのEtherNet/IPユニットおよびEthernetユニットのEthernet機能における複数の脆弱性	CWE-404 CWE-670	CVE-2026-1874 CVE-2026-1875 CVE-2026-1876	2026-04-24 17:45	2026-03-3	Show	GitHub Exploit DB Packet Storm

4805	5.4	警告 Network	Apache Software Foundation	Apache ActiveMQ Apache ActiveMQ MQTT	Apache ActiveMQシリーズにおけるMQTTパケット検証不備の脆弱性［AMQ-9810］	CWE-Other その他	CVE-2025-66168 CVE-2026-40046	2026-04-24 12:11	2026-03-4	Show	GitHub Exploit DB Packet Storm

4806	9.1	緊急 Network	oauth2_proxy project	oauth2_proxy	oauth2_proxy projectのoauth2_proxyにおけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-34457	2026-04-24 11:44	2026-04-14	Show	GitHub Exploit DB Packet Storm

4807	5.9	警告 Network	OpenClaw	OpenClaw	OpenClawにおける不十分なランダム値の使用に関する脆弱性	CWE-330 不十分なランダム値の使用	CVE-2026-34511	2026-04-24 11:44	2026-04-3	Show	GitHub Exploit DB Packet Storm

4808	7.1	重要 Network	Chamilo Association	Chamilo LMS	Chamilo AssociationのChamilo LMSにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-34602	2026-04-24 11:44	2026-04-14	Show	GitHub Exploit DB Packet Storm

4809	8.8	重要 Network	Electron	electron	Electronのelectronにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-34770	2026-04-24 11:44	2026-04-4	Show	GitHub Exploit DB Packet Storm

4810	8.8	重要 Network	Electron	electron	Electronのelectronにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-34771	2026-04-24 11:44	2026-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347831	-	coolphp	coolphp_web_portal	Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.	NVD-CWE-Other	CVE-2004-1601	2017-07-11 10:31	2004-10-16	Show	GitHub Exploit DB Packet Storm

347832	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.	NVD-CWE-Other	CVE-2004-1605	2017-07-11 10:31	2004-10-14	Show	GitHub Exploit DB Packet Storm

347833	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.	NVD-CWE-Other	CVE-2004-1606	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347834	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error mes…	NVD-CWE-Other	CVE-2004-1607	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347835	-	best_software saleslogix_corporation	saleslogix	SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.	NVD-CWE-Other	CVE-2004-1608	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347836	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1609	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347837	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the s…	NVD-CWE-Other	CVE-2004-1611	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347838	-	saleslogix_corporation	saleslogix	Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request.	NVD-CWE-Other	CVE-2004-1612	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347839	-	links	links	Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangl…	NVD-CWE-Other	CVE-2004-1616	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

347840	-	vypress	tonecast	Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.	NVD-CWE-Other	CVE-2004-1618	2017-07-11 10:31	2004-10-19	Show	GitHub Exploit DB Packet Storm