Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5941 9.8 緊急
Network 		goshs goshs goshsにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-40884 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
5942 8.8 重要
Network 		goshs goshs goshsにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-40885 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
5943 7.5 重要
Network 		gomarkdown markdown gomarkdownのMarkdownにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-40890 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
5944 10 緊急
Network 		WWBN AVideo WWBNのAVideoにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-40911 2026-04-30 12:28 2026-04-21 Show GitHub Exploit DB Packet Storm
5945 5.4 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40923 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
5946 6.5 警告
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-40924 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
5947 7.5 重要
Network 		Linux Foundation tekton pipelines Linux Foundationのtekton pipelinesにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-40938 2026-04-30 12:27 2026-04-21 Show GitHub Exploit DB Packet Storm
5948 6.5 警告
Network 		Apache Software Foundation ActiveMQ Web
Apache ActiveMQ 		Apache Software FoundationのApache ActiveMQ等の複数製品における複数の脆弱性 CWE-79
CWE-79
CWE-915
CVE-2026-41043 2026-04-30 12:27 2026-04-24 Show GitHub Exploit DB Packet Storm
5949 8.8 重要
Network 		Apache Software Foundation Apache ActiveMQ
ActiveMQ Broker 		Apache Software FoundationのApache ActiveMQ等の複数製品における複数の脆弱性 CWE-20
CWE-94
CVE-2026-41044 2026-04-30 12:27 2026-04-24 Show GitHub Exploit DB Packet Storm
5950 8.2 重要
Network 		oauth2_proxy project oauth2_proxy oauth2_proxy projectのoauth2_proxyにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
代替パスまたはチャネルを使用した認証回避 		CVE-2026-41059 2026-04-30 12:27 2026-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
352061 - invision_power_services invision_board Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) sh… NVD-CWE-Other
CVE-2004-0359 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
352062 - - - The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into tha… NVD-CWE-Other
CVE-2004-0361 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
352063 - iss blackice_agent_server
blackice_pc_protection
blackice_server_protection
realsecure_desktop
realsecure_guard
realsecure_network_sensor
realsecure_sentry
realsecure_server_sensor 		Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote at… NVD-CWE-Other
CVE-2004-0362 2017-07-11 10:30 2004-04-15 Show GitHub Exploit DB Packet Storm
352064 - symantec norton_antispam Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code v… NVD-CWE-Other
CVE-2004-0363 2017-07-11 10:30 2004-04-15 Show GitHub Exploit DB Packet Storm
352065 - symantec norton_internet_security The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method. NVD-CWE-Other
CVE-2004-0364 2017-07-11 10:30 2004-04-15 Show GitHub Exploit DB Packet Storm
352066 - entrust
symantec 		entrust_libkmp_isakmp_library
enterprise_firewall
velociraptor
gateway_security_5300
gateway_security_5400 		Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote at… NVD-CWE-Other
CVE-2004-0369 2017-07-11 10:30 2004-12-31 Show GitHub Exploit DB Packet Storm
352067 - freebsd freebsd The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause … NVD-CWE-Other
CVE-2004-0370 2017-07-11 10:30 2004-05-4 Show GitHub Exploit DB Packet Storm
352068 - kth heimdal Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate o… NVD-CWE-Other
CVE-2004-0371 2017-07-11 10:30 2004-05-4 Show GitHub Exploit DB Packet Storm
352069 - xine xine xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts. NVD-CWE-Other
CVE-2004-0372 2017-07-11 10:30 2004-04-15 Show GitHub Exploit DB Packet Storm
352070 - interchange_development_group interchange Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string. NVD-CWE-Other
CVE-2004-0374 2017-07-11 10:30 2004-05-4 Show GitHub Exploit DB Packet Storm