Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5211 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における認可されていない行為者への個人情報の漏えいに関する脆弱性 CWE-359
認可されていないアクターへの個人情報の漏えい 		CVE-2026-6765 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5212 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-6766 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5213 5.3 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-6767 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5214 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6768 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5215 8.8 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-6769 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5216 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-6770 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5217 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-6771 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5218 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-6772 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5219 7.5 重要
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-6773 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
5220 5.4 警告
Network 		Mozilla Foundation Mozilla Firefox
Mozilla Thunderbird 		Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-6774 2026-04-24 11:39 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
348801 - karjasoft sami_http_server Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request. NVD-CWE-Other
CVE-2004-0292 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348802 - shopcartcgi shopcartcgi Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi. NVD-CWE-Other
CVE-2004-0293 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348803 - transsoft broker_ftp_server TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection. NVD-CWE-Other
CVE-2004-0295 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348804 - transsoft broker_ftp_server TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection. NVD-CWE-Other
CVE-2004-0296 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348805 - aclogic cesarftp CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter. NVD-CWE-Other
CVE-2004-0298 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348806 - smallftpd smallftpd Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters. NVD-CWE-Other
CVE-2004-0299 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348807 - ecommerce_corporation_online store_kit SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.ph… NVD-CWE-Other
CVE-2004-0300 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348808 - ecommerce_corporation_online store_kit Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter. NVD-CWE-Other
CVE-2004-0301 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348809 - fools_workshop owls_workshop Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile … NVD-CWE-Other
CVE-2004-0302 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
348810 - - - OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the f… NVD-CWE-Other
CVE-2004-0303 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm