Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
5891 8.8 重要
Network
Actual Budget Actual Actual BudgetのActualにおける複数の脆弱性 CWE-284
CWE-862
CVE-2026-33318 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
5892 7.5 重要
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおける複数の脆弱性 CWE-120
CWE-502
CVE-2026-33337 2026-04-30 12:30 2026-04-17 Show GitHub Exploit DB Packet Storm
5893 4.9 警告
Network
PowerDNS PowerDNS Recursor PowerDNSのPowerDNS RecursorにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-33600 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
5894 4.9 警告
Network
PowerDNS PowerDNS Recursor PowerDNSのPowerDNS RecursorにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-33601 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
5895 9.1 緊急
Network
EspoCRM EspoCRM EspoCRMにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-33656 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
5896 7.2 重要
Network
EspoCRM EspoCRM EspoCRMにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル
CVE-2026-33733 2026-04-30 12:30 2026-04-22 Show GitHub Exploit DB Packet Storm
5897 7.5 重要
Network
FirebirdSQL Firebird FirebirdSQLのFirebirdにおける不正な構文構造の不適切な処理に関する脆弱性 CWE-228
不正な構文構造の不適切な処理
CVE-2026-34232 2026-04-30 12:30 2026-04-17 Show GitHub Exploit DB Packet Storm
5898 5.3 警告
Network
オラクル Oracle GoldenGate オラクルのOracle GoldenGateにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-34273 2026-04-30 12:30 2026-04-21 Show GitHub Exploit DB Packet Storm
5899 8.1 重要
Network
getkirby kirby getkirbyのkirbyにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化
CVE-2026-34587 2026-04-30 12:30 2026-04-24 Show GitHub Exploit DB Packet Storm
5900 9 緊急
Network
Ci4-cms-erp Ci4MS Ci4-cms-erpのCi4MSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-34989 2026-04-30 12:30 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351891 - kde konqueror KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to s… NVD-CWE-Other
CVE-2004-0870 2017-07-11 10:30 2004-09-16 Show GitHub Exploit DB Packet Storm
351892 - mozilla mozilla Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal c… NVD-CWE-Other
CVE-2004-0871 2017-07-11 10:30 2004-09-16 Show GitHub Exploit DB Packet Storm
351893 - apple ichat
ichat_av
Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program. NVD-CWE-Other
CVE-2004-0873 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
351894 - phpgroupware phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a reques… NVD-CWE-Other
CVE-2004-0875 2017-07-11 10:30 2004-12-23 Show GitHub Exploit DB Packet Storm
351895 - getmail
gentoo
slackware
getmail
linux
slackware_linux
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file. NVD-CWE-Other
CVE-2004-0880 2017-07-11 10:30 2005-01-27 Show GitHub Exploit DB Packet Storm
351896 - getmail
gentoo
slackware
getmail
linux
slackware_linux
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir. NVD-CWE-Other
CVE-2004-0881 2017-07-11 10:30 2005-01-27 Show GitHub Exploit DB Packet Storm
351897 - linux
suse
linux_kernel
suse_linux
SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges. NVD-CWE-Other
CVE-2004-0887 2017-07-11 10:30 2005-01-27 Show GitHub Exploit DB Packet Storm
351898 - easy_software_products
gnome
kde
pdftohtml
tetex
xpdf
debian
gentoo
redhat
suse
ubuntu
cups
gpdf
koffice
kpdf
pdftohtml
tetex
xpdf
debian_linux
linux
kde
enterprise_linux
enterprise_linux_desktop
fedora_core
linux_advanced_workstation
suse_linu…
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a differen… NVD-CWE-Other
CVE-2004-0889 2017-07-11 10:30 2005-01-27 Show GitHub Exploit DB Packet Storm
351899 - mozilla mozilla
thunderbird
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow … NVD-CWE-Other
CVE-2004-0907 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
351900 - mozilla mozilla
thunderbird
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing softwar… NVD-CWE-Other
CVE-2004-0909 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm