Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
6291	7.5	重要 Network	xmlsoft.org レッドハット	Red Hat Hardened Images Red Hat OpenShift Container Platform libxml2 Red Hat Enterprise Linux JBoss Core Services	レッドハット等の複数ベンダの製品における型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-6732	2026-05-7 10:50	2026-04-23	Show	GitHub Exploit DB Packet Storm

6292	7.5	重要 Network	Eclipse Foundation	Eclipse OpenJ9	Eclipse FoundationのEclipse OpenJ9における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-6918	2026-05-7 10:50	2026-05-5	Show	GitHub Exploit DB Packet Storm

6293	-	-	IDrive Inc.	IDrive Cloud Backup Client for Windows	IDrive Cloud Backup Client for Windowsにおける権限昇格の脆弱性	-	CVE-2026-1995	2026-05-1 15:13	2026-04-30	Show	GitHub Exploit DB Packet Storm

6294	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年04月28日）	-	-	2026-05-1 14:31	2026-04-30	Show	GitHub Exploit DB Packet Storm

6295	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	F456 Firmware	Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性	CWE-119 CWE-120	CVE-2026-7100	2026-05-1 10:49	2026-04-27	Show	GitHub Exploit DB Packet Storm

6296	8.8	重要 Network	Shenzhen Tenda Technology Co.,Ltd.	F456 Firmware	Shenzhen Tenda Technology Co.,Ltd.のF456 Firmwareにおける複数の脆弱性	CWE-74 CWE-77	CVE-2026-7102	2026-05-1 10:49	2026-04-27	Show	GitHub Exploit DB Packet Storm

6297	7.2	重要 Local	click project	click	Pallets projectのClickにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-7246	2026-05-1 10:49	2026-04-30	Show	GitHub Exploit DB Packet Storm

6298	7.8	重要 Local	LizardSystems	Terminal Services Manager	LizardSystemsのTerminal Services Managerにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25259	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

6299	5.5	警告 Local	EZB Systems	UltraISO	EZB SystemsのUltraISOにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2018-25267	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

6300	6.1	警告 Network	IceWarp, Inc.	icewarp	IceWarp, Inc.のicewarpにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2018-25269	2026-05-1 10:49	2026-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
351241	-	coolphp	coolphp_web_portal	Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.	NVD-CWE-Other	CVE-2004-1601	2017-07-11 10:31	2004-10-16	Show	GitHub Exploit DB Packet Storm

351242	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.	NVD-CWE-Other	CVE-2004-1605	2017-07-11 10:31	2004-10-14	Show	GitHub Exploit DB Packet Storm

351243	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.	NVD-CWE-Other	CVE-2004-1606	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351244	-	best_software saleslogix_corporation	saleslogix	slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error mes…	NVD-CWE-Other	CVE-2004-1607	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351245	-	best_software saleslogix_corporation	saleslogix	SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.	NVD-CWE-Other	CVE-2004-1608	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351246	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.	NVD-CWE-Other	CVE-2004-1609	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351247	-	best_software saleslogix_corporation	saleslogix	SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the s…	NVD-CWE-Other	CVE-2004-1611	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351248	-	saleslogix_corporation	saleslogix	Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request.	NVD-CWE-Other	CVE-2004-1612	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351249	-	links	links	Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangl…	NVD-CWE-Other	CVE-2004-1616	2017-07-11 10:31	2004-10-18	Show	GitHub Exploit DB Packet Storm

351250	-	vypress	tonecast	Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.	NVD-CWE-Other	CVE-2004-1618	2017-07-11 10:31	2004-10-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed