Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
71 6.5 警告
Network
Faraday Project Faraday Faraday ProjectのFaradayにおけるサーバサイドのリクエストフォージェリの脆弱性 New CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-33637 2026-05-25 10:22 2026-05-19 Show GitHub Exploit DB Packet Storm
72 8.8 重要
Local
FreeBSD FreeBSD FreeBSDにおけるスタックベースのバッファオーバーフローの脆弱性 New CWE-121
スタックオーバーフロー
CVE-2026-39461 2026-05-25 10:22 2026-05-21 Show GitHub Exploit DB Packet Storm
73 6.5 警告
Network
plane plane planeにおけるデータクエリロジックの特殊要素の不適切な中立化に関する脆弱性 New CWE-943
データクエリロジックの特殊要素の不適切な中立化
CVE-2026-40102 2026-05-25 10:22 2026-05-20 Show GitHub Exploit DB Packet Storm
74 7.5 重要
Network
マイクロソフト Microsoft Entra ID Microsoft Entra ID のスプーフィングの脆弱性 New CWE-200
情報漏えい
CVE-2026-40379 2026-05-25 10:22 2026-05-12 Show GitHub Exploit DB Packet Storm
75 4.3 警告
Network
Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 New CWE-863
不正な認証
CVE-2026-4055 2026-05-25 10:22 2026-05-21 Show GitHub Exploit DB Packet Storm
76 7.8 重要
Local
Samba Project rsync Samba Projectのrsyncにおけるレングスパラメーターの不整合による処理に関する脆弱性 New CWE-130
レングスパラメーターの不整合による不適切な処理
CVE-2026-41035 2026-05-25 10:22 2026-04-16 Show GitHub Exploit DB Packet Storm
77 9.8 緊急
Network
NASA F Prime NASAのF Primeにおける複数の脆弱性 New CWE-190
CWE-787
CVE-2026-41144 2026-05-25 10:22 2026-04-22 Show GitHub Exploit DB Packet Storm
78 7.8 重要
Local
DevSpace DevSpace DevSpaceにおける複数の脆弱性 New CWE-200
CWE-306
CVE-2026-42283 2026-05-25 10:22 2026-05-14 Show GitHub Exploit DB Packet Storm
79 10 緊急
Network
マイクロソフト
The Foreman
Azure Resource Manager
Azure Local
Azure Local 向けディスコネクテッド オペレーション サービスの特権昇格の脆弱性 New CWE-287
CWE-noinfo
CVE-2026-42822 2026-05-25 10:22 2026-05-18 Show GitHub Exploit DB Packet Storm
80 5.5 警告
Local
Linux Linux Kernel LinuxのLinux Kernelにおける不完全なクリーンアップに関する脆弱性 New CWE-459
不完全なクリーンアップ
CVE-2026-43395 2026-05-25 10:22 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345971 - freebsd freebsd FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument. NVD-CWE-Other
CVE-2004-0618 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345972 - jelsoft vbulletin Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. NVD-CWE-Other
CVE-2004-0620 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345973 - zaireweb_solutions newsletter_zws admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and the… NVD-CWE-Other
CVE-2004-0621 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345974 - gnu gnats Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog. NVD-CWE-Other
CVE-2004-0623 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345975 - artmedic_webdesign artmedic_links PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on… NVD-CWE-Other
CVE-2004-0624 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345976 - websoft infinity_web SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page. NVD-CWE-Other
CVE-2004-0625 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345977 - conectiva
gentoo
linux
suse
linux
linux_kernel
suse_linux
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infini… NVD-CWE-Other
CVE-2004-0626 2017-07-11 10:30 2004-12-6 Show GitHub Exploit DB Packet Storm
345978 - adobe acrobat
acrobat_reader
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file … NVD-CWE-Other
CVE-2004-0629 2017-07-11 10:30 2004-09-28 Show GitHub Exploit DB Packet Storm
345979 - adobe acrobat_reader The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shel… NVD-CWE-Other
CVE-2004-0630 2017-07-11 10:30 2004-08-18 Show GitHub Exploit DB Packet Storm
345980 - adobe acrobat_reader Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arb… NVD-CWE-Other
CVE-2004-0631 2017-07-11 10:30 2004-08-18 Show GitHub Exploit DB Packet Storm