Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
761	8.8	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-44870	2026-05-18 12:10	2026-05-12	Show	GitHub Exploit DB Packet Storm

762	8.8	重要 Network	アルバネットワークス株式会社	SD-WAN ArubaOS	アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-44871	2026-05-18 12:10	2026-05-12	Show	GitHub Exploit DB Packet Storm

763	6.1	警告 Network	Astro	Astro	Astroにおける複数の脆弱性	CWE-323 CWE-79	CVE-2026-45028	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

764	7.5	重要 Network	Vercel, Inc. (旧 Zeit, Inc.)	Next.js	Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性	CWE-288 代替パスまたはチャネルを使用した認証回避	CVE-2026-45109	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

765	7.5	重要 Network	libexpat project	libexpat	libexpat projectのlibexpatにおけるアルゴリズムの複雑さに関する脆弱性	CWE-407 アルゴリズムの複雑性	CVE-2026-45186	2026-05-18 12:10	2026-05-10	Show	GitHub Exploit DB Packet Storm

766	9.8	緊急 Network	vm2 project	vm2	vm2 projectのvm2における誤った領域へのリソースの漏えいに関する脆弱性	CWE-668 誤った領域へのリソースの漏えい	CVE-2026-45411	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

767	5.9	警告 Network	Haxx	cURL	HaxxのcURLにおける複数の脆弱性	CWE-295 CWE-319	CVE-2026-4873	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

768	5.9	警告 Network	Haxx	cURL	HaxxのcURLにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-6253	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

769	7.5	重要 Network	Haxx	cURL	HaxxのcURLにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-6276	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

770	5.3	警告 Network	Haxx	cURL	HaxxのcURLにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-6429	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345941	-	inter7	sqwebmail	This vulnerability is addressed in the following product release: Inter7, SqWebMail, 4.0.5	NVD-CWE-Other	CVE-2004-0591	2017-07-11 10:30	2004-08-6	Show	GitHub Exploit DB Packet Storm

345942	-	suse	suse_linux	The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denia…	NVD-CWE-Other	CVE-2004-0592	2017-07-11 10:30	2004-12-31	Show	GitHub Exploit DB Packet Storm

345943	-	sygate_technologies	enforcer secure_enterprise	Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.	NVD-CWE-Other	CVE-2004-0593	2017-07-11 10:30	2004-09-28	Show	GitHub Exploit DB Packet Storm

345944	-	distcc	distcc	distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.	NVD-CWE-Other	CVE-2004-0601	2017-07-11 10:30	2004-12-23	Show	GitHub Exploit DB Packet Storm

345945	-	freebsd	freebsd	The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system p…	NVD-CWE-Other	CVE-2004-0602	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345946	-	gnu	gzip	gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary …	NVD-CWE-Other	CVE-2004-0603	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345947	-	gift-fasttrack gentoo	gift-fasttrack linux	The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.	NVD-CWE-Other	CVE-2004-0604	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345948	-	ircd-hybrid ircd-ratbox	ircd-hybrid ircd-ratbox	Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote a…	CWE-16 Configuration	CVE-2004-0605	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345949	-	infoblox	dns_one_appliance	Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTN…	NVD-CWE-Other	CVE-2004-0606	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

345950	-	arush dreamforge epic_games infogrames ion_storm nerf_arena_blast rage_software robert_jordan running_with_scissors gentoo	devastation tnn_outdoors_pro_hunter unreal_engine unreal_tournament unreal_tournament_2003 unreal_tournament_2004 tacticalops x-com_enforcer deusex nerf_arena_blast mobi…	The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earli…	NVD-CWE-Other	CVE-2004-0608	2017-07-11 10:30	2004-12-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed