Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5111 5.3 警告
Network 		Discourse Discourse Discourseにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34947 2026-04-24 11:44 2026-04-3 Show GitHub Exploit DB Packet Storm
5112 9.1 緊急
Network 		nearform fast-jwt nearformのfast-jwtにおける暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2026-34950 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5113 4.3 警告
Network 		Plunk Plunk PlunkにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-34975 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5114 10 緊急
Network 		dgraph dgraph dgraphにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-34976 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5115 8.2 重要
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-34982 2026-04-24 11:44 2026-04-6 Show GitHub Exploit DB Packet Storm
5116 6.5 警告
Network 		external-secrets external secrets operator external-secretsのexternal secrets operatorにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-34984 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5117 8.1 重要
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-73
CWE-918
CVE-2026-35032 2026-04-24 11:44 2026-04-14 Show GitHub Exploit DB Packet Storm
5118 9.1 緊急
Network 		jellyfin jellyfin jellyfinにおける複数の脆弱性 CWE-862
CWE-88
CVE-2026-35033 2026-04-24 11:43 2026-04-14 Show GitHub Exploit DB Packet Storm
5119 9 緊急
Network 		Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35035 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
5120 7.2 重要
Network 		Ech0 Ech0 Ech0におけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-35037 2026-04-24 11:43 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349151 - cscope
debian
gentoo
sco 		cscope
debian_linux
linux
unixware 		main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2004-0996 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
349152 - telnetd telnetd
telnetd-ssl 		Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0998 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
349153 - zgv zgv_image_viewer zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images. NVD-CWE-Other
CVE-2004-0999 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
349154 - debian lintian lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. NVD-CWE-Other
CVE-2004-1000 2017-07-11 10:30 2004-01-10 Show GitHub Exploit DB Packet Storm
349155 - trend_micro scanmail_domino Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file. NVD-CWE-Other
CVE-2004-1003 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349156 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. NVD-CWE-Other
CVE-2004-1004 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
349157 - midnight_commander
debian
gentoo
redhat
suse
turbolinux 		midnight_commander
debian_linux
linux
enterprise_linux
linux_advanced_workstation
suse_linux
turbolinux_server
turbolinux_workstation 		Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact. NVD-CWE-Other
CVE-2004-1005 2017-07-11 10:30 2005-04-14 Show GitHub Exploit DB Packet Storm
349158 - isc dhcpd Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702. NVD-CWE-Other
CVE-2004-1006 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349159 - bogofilter
ubuntu 		email_filter
ubuntu_linux 		The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a n… NVD-CWE-Other
CVE-2004-1007 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349160 - putty
tortoisecvs 		putty
tortoisecvs 		Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads… NVD-CWE-Other
CVE-2004-1008 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm