Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5381	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-6766	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5382	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6767	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5383	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6768	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5384	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-6769	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5385	6.5	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-6770	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5386	9.8	緊急 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-6771	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5387	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における例外的な状態のチェックに関する脆弱性	CWE-754 例外的な状態における不適切なチェック	CVE-2026-6772	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5388	7.5	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-6773	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5389	5.4	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品における保護メカニズムの不具合に関する脆弱性	CWE-693 保護メカニズムの不具合	CVE-2026-6774	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

5390	5.3	警告 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-6775	2026-04-24 11:39	2026-04-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
348921	-	coolphp	coolphp_web_portal	Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.	NVD-CWE-Other	CVE-2004-1601	2017-07-11 10:31	2004-10-16	Show	GitHub Exploit DB Packet Storm

348922	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.	NVD-CWE-Other	CVE-2004-1605	2017-07-11 10:31	2004-10-14	Show	GitHub Exploit DB Packet Storm

348923	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.	NVD-CWE-Other	CVE-2004-1606	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348924	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error mes…	NVD-CWE-Other	CVE-2004-1607	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348925	-	best_software saleslogix_corporation	saleslogix	SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.	NVD-CWE-Other	CVE-2004-1608	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348926	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1609	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348927	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the s…	NVD-CWE-Other	CVE-2004-1611	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348928	-	saleslogix_corporation	saleslogix	Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request.	NVD-CWE-Other	CVE-2004-1612	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348929	-	links	links	Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangl…	NVD-CWE-Other	CVE-2004-1616	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

348930	-	vypress	tonecast	Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.	NVD-CWE-Other	CVE-2004-1618	2017-07-11 10:31	2004-10-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed