Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6111	4.3	警告 Network	xibosignage	xibo	xibosignageのxiboにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-31956	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

6112	8.8	重要 Network	マイクロソフト	Azure Logic Apps	Azure Logic Apps の特権昇格の脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-32171	2026-04-30 12:31	2026-04-14	Show	GitHub Exploit DB Packet Storm

6113	7.5	重要 Network	getkirby	kirby	getkirbyのkirbyにおけるブラインド XPath インジェクションの脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2026-32870	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

6114	9.8	緊急 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33076	2026-04-30 12:31	2026-04-24	Show	GitHub Exploit DB Packet Storm

6115	7.5	重要 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-33077	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

6116	9.8	緊急 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-33078	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

6117	8.8	重要 Network	Roxy-WI	Roxy-WI	Roxy-WIにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-33208	2026-04-30 12:30	2026-04-24	Show	GitHub Exploit DB Packet Storm

6118	7.5	重要 Network	PowerDNS	dnsdist	PowerDNSのdnsdistにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33254	2026-04-30 12:30	2026-04-22	Show	GitHub Exploit DB Packet Storm

6119	7.5	重要 Network	PowerDNS	PowerDNS Recursor	PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33256	2026-04-30 12:30	2026-04-22	Show	GitHub Exploit DB Packet Storm

6120	7.5	重要 Network	PowerDNS	PowerDNS Recursor	PowerDNSのPowerDNS Recursorにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性	CWE-770 制限またはスロットリング無しのリソースの割り当て	CVE-2026-33258	2026-04-30 12:30	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351371	-	toplayer	attack_mitigator	Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a lar…	NVD-CWE-Other	CVE-2004-1749	2017-07-11 10:31	2004-07-22	Show	GitHub Exploit DB Packet Storm

351372	-	vnc	realvnc	RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900.	NVD-CWE-Other	CVE-2004-1750	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

351373	-	massive_entertainment	ground_control_ii_operation_exodus	Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket err…	NVD-CWE-Other	CVE-2004-1751	2017-07-11 10:31	2004-08-26	Show	GitHub Exploit DB Packet Storm

351374	-	-	-	Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.	NVD-CWE-Other	CVE-2004-1752	2017-07-11 10:31	2004-08-24	Show	GitHub Exploit DB Packet Storm

351375	-	mozilla netscape	firefox mozilla navigator	The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allo…	NVD-CWE-Other	CVE-2004-1753	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

351376	-	-	-	The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after th…	NVD-CWE-Other	CVE-2004-1755	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

351377	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejec…	NVD-CWE-Other	CVE-2004-1756	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

351378	-	bea	weblogic_server	BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2004-1757	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

351379	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in co…	NVD-CWE-Other	CVE-2004-1758	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

351380	-	cisco ibm	emergency_responder ip_call_center_express_enhanced ip_call_center_express_standard ip_interactive_voice_response personal_assistant director_agent call_manager internet_service_…	Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 1…	CWE-399 Resource Management Errors	CVE-2004-1759	2017-07-11 10:31	2004-01-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed