Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5201	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6760	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5202	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6761	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5203	6.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるスプーフィングによる認証回避に関する脆弱性	CWE-290 スプーフィングによる認証回避	CVE-2026-6762	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5204	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-6763	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5205	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6764	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5206	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性	CWE-359 認可されていないアクターへの個人情報の漏えい	CVE-2026-6765	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5207	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-6766	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5208	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6767	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5209	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6768	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5210	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6769	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348701	-	vice	vice	Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format st…	NVD-CWE-Other	CVE-2004-0453	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

348702	-	rlpr	rlpr	Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.	NVD-CWE-Other	CVE-2004-0454	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

348703	-	pavuk debian gentoo	pavuk debian_linux linux	Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.	NVD-CWE-Other	CVE-2004-0456	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

348704	-	ieee	802.11_wireless_protocol	The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal …	NVD-CWE-Other	CVE-2004-0459	2017-07-11 10:30	2004-07-7	Show	GitHub Exploit DB Packet Storm

348705	-	-	-	The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext o…	NVD-CWE-Other	CVE-2004-0462	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

348706	-	openconnect	webconnect	Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequ…	NVD-CWE-Other	CVE-2004-0465	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

348707	-	openconnect	webconnect	WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1…	NVD-CWE-Other	CVE-2004-0466	2017-07-11 10:30	2004-02-21	Show	GitHub Exploit DB Packet Storm

348708	-	juniper	junos	Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to…	NVD-CWE-Other	CVE-2004-0467	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

348709	-	infoblox isc suse mandrakesoft redhat	dns_one_appliance dhcpd suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server suse_linux_firewall_cd suse_linux_office_serv…	Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arb…	NVD-CWE-Other	CVE-2004-0460	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

348710	-	infoblox isc suse mandrakesoft redhat	dns_one_appliance dhcpd suse_email_server suse_linux_admin-cd_for_firewall suse_linux_connectivity_server suse_linux_database_server suse_linux_firewall_cd suse_linux_office_serv…	The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe…	NVD-CWE-Other	CVE-2004-0461	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed