Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1041	9.8	緊急 Network	Yarbo	Lawn Mower Pro Firmware Lawn Mower Firmware	YarboのLawn Mower Firmware等の複数製品におけるハードコードされた認証情報の使用に関する脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2026-7414	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

1042	9.8	緊急 Network	Yarbo	Lawn Mower Pro Firmware Lawn Mower Firmware	YarboのLawn Mower Firmware等の複数製品における重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-7415	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

1043	6.5	警告 Network	8421bit	MiniClaw	8421bitのMiniClawにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-8113	2026-05-18 12:05	2026-05-7	Show	GitHub Exploit DB Packet Storm

1044	8.8	重要 Network	sentry	sentry	sentryにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2021-47935	2026-05-18 12:05	2026-05-10	Show	GitHub Exploit DB Packet Storm

1045	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2025-65086	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

1046	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-65087	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

1047	7.8	重要 Local	ashlar	lithium Cobalt Share cobalt argon xenon	Ashlar-VellumのArgon等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2025-65088	2026-05-18 12:05	2026-05-12	Show	GitHub Exploit DB Packet Storm

1048	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2025-71296	2026-05-18 12:04	2026-05-8	Show	GitHub Exploit DB Packet Storm

1049	7.4	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft …	Windows TCP/IP のサービス拒否の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-40413	2026-05-18 11:31	2026-05-12	Show	GitHub Exploit DB Packet Storm

1050	7.4	重要 Adjacent	マイクロソフト	Microsoft Windows Server 2025 Microsoft Windows 10 22h2 Microsoft Windows 11 25h2 Microsoft Windows Server 2022 Microsoft …	Windows TCP/IP のサービス拒否の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-40414	2026-05-18 11:31	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345651	-	kerio	personal_firewall	Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physical…	NVD-CWE-Other	CVE-2004-1658	2017-07-11 10:31	2004-09-2	Show	GitHub Exploit DB Packet Storm

345652	-	cutephp	cutenews	Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web scri…	NVD-CWE-Other	CVE-2004-1659	2017-07-11 10:31	2004-09-2	Show	GitHub Exploit DB Packet Storm

345653	-	cutephp	cutenews	PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.	NVD-CWE-Other	CVE-2004-1660	2017-07-11 10:31	2004-08-30	Show	GitHub Exploit DB Packet Storm

345654	-	sitecubed	mailworks_professional	MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."	NVD-CWE-Other	CVE-2004-1661	2017-07-11 10:31	2004-09-2	Show	GitHub Exploit DB Packet Storm

345655	-	-	-	YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.	NVD-CWE-Other	CVE-2004-1662	2017-07-11 10:31	2004-08-25	Show	GitHub Exploit DB Packet Storm

345656	-	activision	call_of_duty call_of_duty_united_offensive	Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection…	NVD-CWE-Other	CVE-2004-1664	2017-07-11 10:31	2004-09-5	Show	GitHub Exploit DB Packet Storm

345657	-	psnews	psnews	Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.	NVD-CWE-Other	CVE-2004-1665	2017-07-11 10:31	2004-09-5	Show	GitHub Exploit DB Packet Storm

345658	-	cerulean_studios	trillian	Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character.	NVD-CWE-Other	CVE-2004-1666	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

345659	-	gearbox_software	halo_combat_evolved	Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.	NVD-CWE-Other	CVE-2004-1667	2017-07-11 10:31	2004-09-9	Show	GitHub Exploit DB Packet Storm

345660	-	easyweb	factory_subjects_module	Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.	NVD-CWE-Other	CVE-2004-1668	2017-07-11 10:31	2004-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed