Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
521	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43285	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

522	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43290	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

523	8.3	重要 Adjacent	Linux	Linux Kernel	LinuxのLinux Kernelにおける初期化されていないリソースの使用に関する脆弱性	CWE-908 初期化されていないリソースの使用	CVE-2026-43291	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

524	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43292	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

525	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43293	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

526	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43294	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

527	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43295	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

528	3.7	低 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおけるタイミングの違いに起因する情報漏えいに関する脆弱性	CWE-208 タイミングの違いに起因する情報漏えい	CVE-2026-43514	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

529	7.5	重要 Network		-	アップルのmacOSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-43652	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

530	7.5	重要 Network	アップル	visionos watchOS iOS tvOS iPadOS	アップルのiPadOS等の複数製品における認可されていない制御領域への重要情報の漏えいに関する脆弱性	CWE-497 認可されていない制御領域への重要情報の漏えい	CVE-2026-43654	2026-05-18 12:13	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346001	-	kde	konqueror	KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to s…	NVD-CWE-Other	CVE-2004-0870	2017-07-11 10:30	2004-09-16	Show	GitHub Exploit DB Packet Storm

346002	-	mozilla	mozilla	Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal c…	NVD-CWE-Other	CVE-2004-0871	2017-07-11 10:30	2004-09-16	Show	GitHub Exploit DB Packet Storm

346003	-	apple	ichat ichat_av	Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.	NVD-CWE-Other	CVE-2004-0873	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346004	-	phpgroupware	phpgroupware	Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a reques…	NVD-CWE-Other	CVE-2004-0875	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

346005	-	getmail gentoo slackware	getmail linux slackware_linux	getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.	NVD-CWE-Other	CVE-2004-0880	2017-07-11 10:30	2005-01-27	Show	GitHub Exploit DB Packet Storm

346006	-	getmail gentoo slackware	getmail linux slackware_linux	getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.	NVD-CWE-Other	CVE-2004-0881	2017-07-11 10:30	2005-01-27	Show	GitHub Exploit DB Packet Storm

346007	-	linux suse	linux_kernel suse_linux	SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.	NVD-CWE-Other	CVE-2004-0887	2017-07-11 10:30	2005-01-27	Show	GitHub Exploit DB Packet Storm

346008	-	easy_software_products gnome kde pdftohtml tetex xpdf debian gentoo redhat suse ubuntu	cups gpdf koffice kpdf pdftohtml tetex xpdf debian_linux linux kde enterprise_linux enterprise_linux_desktop fedora_core linux_advanced_workstation suse_linu…	Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a differen…	NVD-CWE-Other	CVE-2004-0889	2017-07-11 10:30	2005-01-27	Show	GitHub Exploit DB Packet Storm

346009	-	mozilla	mozilla thunderbird	The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow …	NVD-CWE-Other	CVE-2004-0907	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

346010	-	mozilla	mozilla thunderbird	Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing softwar…	NVD-CWE-Other	CVE-2004-0909	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed