Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5331 6.1 警告
Network 		XWiki xwiki XWikiのxwikiにおけるクロスサイトスクリプティングの脆弱性 CWE-80
クロスサイトスクリプティング (Basic XSS) 		CVE-2026-40105 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
5332 6.1 警告
Network 		Prometheus Prometheus Prometheusにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-40179 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
5333 7.5 重要
Network 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-40192 2026-04-24 11:41 2026-04-15 Show GitHub Exploit DB Packet Storm
5334 8.2 重要
Network 		maddy project maddy maddy projectのmaddyにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-40193 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
5335 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40244 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
5336 7.1 重要
Local 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-40250 2026-04-24 11:41 2026-04-21 Show GitHub Exploit DB Packet Storm
5337 6.1 警告
Local 		openCryptoki Project openCryptoki openCryptoki ProjectのopenCryptokiにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40253 2026-04-24 11:41 2026-04-16 Show GitHub Exploit DB Packet Storm
5338 5.3 警告
Network 		pypdf project pypdf pypdf projectのpypdfにおけるDTD の再帰的なエンティティ参照の不適切な制限に関する脆弱性 CWE-776
DTD の再帰的なエンティティ参照の不適切な制限 		CVE-2026-40260 2026-04-24 11:41 2026-04-17 Show GitHub Exploit DB Packet Storm
5339 8.8 重要
Network 		Chamilo Association Chamilo LMS Chamilo AssociationのChamilo LMSにおける複数の脆弱性 CWE-269
CWE-863
CVE-2026-40291 2026-04-24 11:41 2026-04-14 Show GitHub Exploit DB Packet Storm
5340 9 緊急
Network 		Gitroom Postiz GitroomのPostizにおける複数の脆弱性 CWE-345
CWE-434
CWE-79
CVE-2026-40487 2026-04-24 11:41 2026-04-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349941 - kerio kerio_mailserver
serverfirewall
winroute_firewall 		Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local … NVD-CWE-Other
CVE-2004-1023 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
349942 - ibm aix Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious … NVD-CWE-Other
CVE-2004-1028 2017-07-11 10:30 2005-01-10 Show GitHub Exploit DB Packet Storm
349943 - thibault_godouet
gentoo 		fcron
linux 		fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file… NVD-CWE-Other
CVE-2004-1030 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349944 - thibault_godouet
gentoo 		fcron
linux 		fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the… NVD-CWE-Other
CVE-2004-1031 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349945 - thibault_godouet
gentoo 		fcron
linux 		fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slas… NVD-CWE-Other
CVE-2004-1032 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349946 - thibault_godouet
gentoo 		fcron
linux 		Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR enviro… NVD-CWE-Other
CVE-2004-1033 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349947 - kaffeine
xine
gentoo 		kaffeine_player
gxine
linux 		Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly … NVD-CWE-Other
CVE-2004-1034 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349948 - imap_proxy imap_proxy Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash… NVD-CWE-Other
CVE-2004-1035 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349949 - twiki
gentoo 		twiki
linux 		The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string. NVD-CWE-Other
CVE-2004-1037 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm
349950 - mandrakesoft
todd_miller
debian
trustix
ubuntu 		mandrake_multi_network_firewall
sudo
debian_linux
mandrake_linux
mandrake_linux_corporate_server
secure_linux
ubuntu_linux 		sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that i… NVD-CWE-Other
CVE-2004-1051 2017-07-11 10:30 2005-03-1 Show GitHub Exploit DB Packet Storm