Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
6271 9.8 緊急
Network
マイクロソフト Bing Microsoft Bing のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-33819 2026-05-7 10:52 2026-04-23 Show GitHub Exploit DB Packet Storm
6272 5 警告
Local
オラクル MySQL オラクルのMySQLにおけるリソースの不適切なシャットダウンおよびリリースに関する脆弱性 CWE-404
リソースの不適切なシャットダウンおよびリリース
CVE-2026-34317 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
6273 5.8 警告
Network
オラクル MySQL オラクルのMySQLにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-34318 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
6274 5 警告
Local
オラクル MySQL オラクルのMySQLにおけるリクエストに対するレスポンス内容の違いに起因する情報漏えいに関する脆弱性 CWE-204
リクエストに対するレスポンス内容の違いに起因する情報漏えい
CVE-2026-34319 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
6275 7.5 重要
Network
オラクル Java VM オラクルのJava VMにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35229 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
6276 4.4 警告
Local
オラクル Oracle Linux オラクルのOracle Linuxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-35233 2026-05-7 10:51 2026-05-1 Show GitHub Exploit DB Packet Storm
6277 5.2 警告
Network
オラクル Hyperion Infrastructure Technology オラクルのHyperion Infrastructure Technologyにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-35244 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
6278 9.1 緊急
Network
Volcengine OpenViking VolcengineのOpenVikingにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理
CVE-2026-40525 2026-05-7 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
6279 7.1 重要
Network
Apache Software Foundation Apache Atlas Apache Software FoundationのApache Atlasにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-40563 2026-05-7 10:51 2026-05-4 Show GitHub Exploit DB Packet Storm
6280 8.8 重要
Adjacent
Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-41429 2026-05-7 10:51 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
351161 - - - WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php. NVD-CWE-Other
CVE-2004-1510 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351162 - - - Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window. NVD-CWE-Other
CVE-2004-1511 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351163 - soft3304 04webserver Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted i… NVD-CWE-Other
CVE-2004-1512 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351164 - soft3304 04webserver 04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries. NVD-CWE-Other
CVE-2004-1513 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351165 - soft3304 04webserver 04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. NVD-CWE-Other
CVE-2004-1514 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351166 - phpwebsite phpwebsite CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_userna… NVD-CWE-Other
CVE-2004-1516 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351167 - - - SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. NVD-CWE-Other
CVE-2004-1518 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351168 - - - SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parame… NVD-CWE-Other
CVE-2004-1519 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351169 - ipswitch imail Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. NVD-CWE-Other
CVE-2004-1520 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
351170 - qualcomm eudora Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitr… NVD-CWE-Other
CVE-2004-1521 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm