Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6271	4.7	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性	CWE-601 オープンリダイレクト	CVE-2026-20060	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

6272	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-20061	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

6273	6.5	警告 Local	シスコシステムズ	Cisco Firepower Threat Defense ソフトウェア	シスコシステムズのCisco Firepower Threat Defense ソフトウェアにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-20064	2026-04-30 12:17	2026-03-4	Show	GitHub Exploit DB Packet Storm

6274	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20078	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

6275	6.5	警告 Network	シスコシステムズ	Cisco Unity Connection	シスコシステムズのCisco Unity Connectionにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-20081	2026-04-30 12:17	2026-04-15	Show	GitHub Exploit DB Packet Storm

6276	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品におけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-22761	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6277	9.1	緊急 Network	GNOME Project	libsoup	GNOME Projectのlibsoupにおける整数アンダーフローの脆弱性	CWE-191 整数アンダーフロー	CVE-2026-2369	2026-04-30 12:17	2026-03-19	Show	GitHub Exploit DB Packet Storm

6278	9.6	緊急 Network	マイクロソフト	Microsoft Partner Center	Microsoft パートナーセンターの特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24303	2026-04-30 12:17	2026-04-23	Show	GitHub Exploit DB Packet Storm

6279	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24504	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

6280	7.2	重要 Network	デル	PowerProtect DP Series Appliance data domain operating system	デルのdata domain operating system等の複数製品における入力確認に関する脆弱性	CWE-20 不適切な入力確認	CVE-2026-24505	2026-04-30 12:17	2026-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
352541	-	zack_smith	unrtf	Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.	NVD-CWE-Other	CVE-2004-1297	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352542	-	michael_kohn	vb2c	Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a crafted FRM file.	NVD-CWE-Other	CVE-2004-1298	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352543	-	vilistextum	vilistextum	Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.	NVD-CWE-Other	CVE-2004-1299	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352544	-	xine	xine-lib	Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.	NVD-CWE-Other	CVE-2004-1300	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352545	-	xlreader	xlreader	Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.	NVD-CWE-Other	CVE-2004-1301	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352546	-	yamt	yamt	The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.	NVD-CWE-Other	CVE-2004-1302	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352547	-	yanf	yanf	Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.	NVD-CWE-Other	CVE-2004-1303	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352548	-	file gentoo trustix	file linux secure_linux	Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF file.	NVD-CWE-Other	CVE-2004-1304	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352549	-	mplayer	unix_mplayer	Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUse…	NVD-CWE-Other	CVE-2004-1309	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

352550	-	mplayer	mplayer	Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet.	NVD-CWE-Other	CVE-2004-1310	2017-07-11 10:30	2005-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed