Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5241	5.5	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-40515	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5242	6.3	警告 Local	HKUDS	OpenHarness	HKUDSのOpenHarnessにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-40516	2026-04-27 11:29	2026-04-17	Show	GitHub Exploit DB Packet Storm

5243	7.6	重要 Network	HKUDS	OpenHarness	HKUDSのOpenHarnessにおける認証に関する脆弱性	CWE-287 不適切な認証	CVE-2026-6729	2026-04-27 11:29	2026-04-20	Show	GitHub Exploit DB Packet Storm

5244	9.8	緊急 Network	Topsec Technologies Group Inc.	Tianxin Internet Behavior Management System	Topsec Technologies Group Inc.のTianxin Internet Behavior Management SystemにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2021-4473	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

5245	7.2	重要 Network	Dolibarr ERP & CRM	dolibarr erp/crm	Dolibarr ERP & CRMのdolibarr erp/crmにおける複数の脆弱性	CWE-94 CWE-95	CVE-2026-22666	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

5246	9.8	緊急 Network	Weaver Software	Weaver e cology	Weaver SoftwareのWeaver e cologyにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-22679	2026-04-27 11:29	2026-04-7	Show	GitHub Exploit DB Packet Storm

5247	8.8	重要 Local	PackageKit Project	PackageKit	PackageKit ProjectのPackageKitにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性	CWE-367 Time-of-check Time-of-use (TOCTOU) 競合状態	CVE-2026-41651	2026-04-27 11:29	2026-04-22	Show	GitHub Exploit DB Packet Storm

5248	4.4	警告 Local	libjxl project	libjxl	libjxl projectのlibjxlにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2025-12474	2026-04-27 11:28	2026-02-11	Show	GitHub Exploit DB Packet Storm

5249	7.5	重要 Network	FirebirdSQL	Firebird	FirebirdSQLのFirebirdにおける情報漏えいに関する脆弱性	CWE-200 CWE-noinfo	CVE-2025-65104	2026-04-27 11:28	2026-04-17	Show	GitHub Exploit DB Packet Storm

5250	6.7	警告 Local	マイクロソフト	Microsoft Windows 10 1607 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 10 22h2 Microsoft Wind…	UEFI セキュアブートのセキュリティ機能バイパスの脆弱性	CWE-807 セキュリティ決定の信頼できない入力への依存	CVE-2026-0390	2026-04-27 11:28	2026-04-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
350441	-	asante	fm2008_managed_ethernet_switch	Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access.	NVD-CWE-Other	CVE-2004-1320	2017-07-11 10:30	2004-12-15	Show	GitHub Exploit DB Packet Storm

350442	-	cisco	unity_server	Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configurat…	NVD-CWE-Other	CVE-2004-1322	2017-07-11 10:30	2004-12-15	Show	GitHub Exploit DB Packet Storm

350443	-	netbsd	netbsd	Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and…	NVD-CWE-Other	CVE-2004-1323	2017-07-11 10:30	2004-12-16	Show	GitHub Exploit DB Packet Storm

350444	-	microsoft	windows_media_player	The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if …	NVD-CWE-Other	CVE-2004-1324	2017-07-11 10:30	2004-12-18	Show	GitHub Exploit DB Packet Storm

350445	-	microsoft	windows_media_player	The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote at…	NVD-CWE-Other	CVE-2004-1325	2017-07-11 10:30	2004-12-18	Show	GitHub Exploit DB Packet Storm

350446	-	ultrix	dxterm	Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.	NVD-CWE-Other	CVE-2004-1326	2017-07-11 10:30	2004-12-20	Show	GitHub Exploit DB Packet Storm

350447	-	crystal_art_software	crystal_ftp	Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.	NVD-CWE-Other	CVE-2004-1327	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

350448	-	ibm	aix	Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.	NVD-CWE-Other	CVE-2004-1330	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

350449	-	debian gentoo	tetex-bin linux	The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.	NVD-CWE-Other	CVE-2004-1336	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

350450	-	gnu conectiva ubuntu	realtime_linux_security_module linux ubuntu_linux	The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to g…	NVD-CWE-Other	CVE-2004-1337	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed