Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5271 7.8 重要
Local
Linux Linux Kernel LinuxのLinux Kernelにおける配列インデックスの検証に関する脆弱性 CWE-129
配列インデックスの不適切な検証
CVE-2026-23354 2026-04-27 11:27 2026-03-25 Show GitHub Exploit DB Packet Storm
5272 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-23355 2026-04-27 11:27 2026-03-25 Show GitHub Exploit DB Packet Storm
5273 7.4 重要
Network
ERLANG Erlang/SSL (Erlang SSL)
Erlang/OTP
Erlang/Public Key (Public Key)
ERLANGのErlang/OTP等の複数製品における証明書検証に関する脆弱性 CWE-295
不正な証明書検証
CVE-2026-32144 2026-04-27 11:27 2026-04-7 Show GitHub Exploit DB Packet Storm
5274 9.8 緊急
Network
CoreWeave marimo CoreWeaveのmarimoにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説
CVE-2026-39987 2026-04-27 11:27 2026-04-9 Show GitHub Exploit DB Packet Storm
5275 9.8 緊急
Network
codefuture CF Image Hosting Script codefutureのCF Image Hosting Scriptにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2019-25709 2026-04-27 11:27 2026-04-12 Show GitHub Exploit DB Packet Storm
5276 9.8 緊急
Network
ERLANG Erlang/Inets (Inets)
Erlang/OTP
ERLANGのErlang/Inets (Inets)等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-28808 2026-04-27 11:27 2026-04-7 Show GitHub Exploit DB Packet Storm
5277 6.1 警告
Network
Dovestones Software Ltd AD Phonebook Dovestones Software LtdのAD Phonebookにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-31013 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
5278 6.3 警告
Network
Dovestones Software Ltd AD Self Update Dovestones Software LtdのAD Self Updateにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2026-31014 2026-04-27 11:27 2026-04-21 Show GitHub Exploit DB Packet Storm
5279 9.8 緊急
Network
reconurge Flowsint reconurgeのFlowsintにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-32311 2026-04-27 11:27 2026-04-20 Show GitHub Exploit DB Packet Storm
5280 7.5 重要
Network
freedom SecureDrop-Client freedomのSecureDrop-Clientにおける複数の脆弱性 CWE-36
CWE-73
CVE-2026-35465 2026-04-27 11:27 2026-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350501 - metamail_corporation
sgi
redhat
metamail
propack
enterprise_linux
linux_advanced_workstation
Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0105 2017-07-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
350502 - freebsd freebsd The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the … NVD-CWE-Other
CVE-2004-0125 2017-07-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
350503 - phpgedview phpgedview Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (do… NVD-CWE-Other
CVE-2004-0127 2017-07-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
350504 - phpgedview phpgedview login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, w… NVD-CWE-Other
CVE-2004-0130 2017-07-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
350505 - visualshapers ezcontents Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS… NVD-CWE-Other
CVE-2004-0132 2017-07-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
350506 - linux linux_kernel The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by r… NVD-CWE-Other
CVE-2004-0133 2017-07-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
350507 - - - cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process. NVD-CWE-Other
CVE-2004-0134 2017-07-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
350508 - sgi irix The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory. NVD-CWE-Other
CVE-2004-0135 2017-07-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
350509 - sgi irix The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary." NVD-CWE-Other
CVE-2004-0136 2017-07-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
350510 - sgi irix Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues." NVD-CWE-Other
CVE-2004-0137 2017-07-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm