Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1201 7.5 重要
Network 		ZyXEL NWA1100-N ファームウェア ZyXELのNWA1100-N ファームウェアにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2026-7287 2026-05-18 11:24 2026-05-12 Show GitHub Exploit DB Packet Storm
1202 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7377 2026-05-18 11:24 2026-05-14 Show GitHub Exploit DB Packet Storm
1203 9.8 緊急
Network 		OpenClaw OpenClaw OpenClawにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-8305 2026-05-18 11:23 2026-05-11 Show GitHub Exploit DB Packet Storm
1204 9.8 緊急
Network 		Mozilla Foundation Mozilla Firefox Mozilla FoundationのMozilla Firefoxにおける保護メカニズムの不具合に関する脆弱性 CWE-693
保護メカニズムの不具合 		CVE-2026-8401 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
1205 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-8581 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
1206 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるアセットへのアクセス後に実装されたアクセス制御チェックに関する脆弱性 CWE-1280
アセットへのアクセス後に実装されたアクセス制御チェック 		CVE-2026-3607 2026-05-18 11:23 2026-05-14 Show GitHub Exploit DB Packet Storm
1207 9.8 緊急
Network 		フォーティネット FortiSandbox
FortiSandbox PaaS
FortiSandbox Cloud 		フォーティネットのFortiSandbox等の複数製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-26083 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
1208 7.5 重要
Network 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-34665 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
1209 6.2 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-34666 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
1210 6.2 警告
Local 		アドビシステムズ C2PA (Coalition for Content Provenance and Authenticity)
(Content Authenticity Initiative) c2pa-web 		アドビの(Content Authenticity Initiative) c2pa-web等の複数製品における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2026-34667 2026-05-18 11:23 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345811 - - - News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie. NVD-CWE-Other
CVE-2004-1847 2017-07-11 10:31 2004-03-20 Show GitHub Exploit DB Packet Storm
345812 - cpanel cpanel Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parame… NVD-CWE-Other
CVE-2004-1849 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm
345813 - fluidgames the_rage The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with the port and IP address set to zero. NVD-CWE-Other
CVE-2004-1850 2017-07-11 10:31 2004-03-23 Show GitHub Exploit DB Packet Storm
345814 - dameware_development mini_remote_control_server Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing. NVD-CWE-Other
CVE-2004-1851 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm
345815 - atari terminator_3_war_of_the_machines Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long ServerInfo variable. NVD-CWE-Other
CVE-2004-1853 2017-07-11 10:31 2004-03-19 Show GitHub Exploit DB Packet Storm
345816 - picophone internet_telephone Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet. NVD-CWE-Other
CVE-2004-1854 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm
345817 - mythic_entertainment dark_age_of_camelot Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack. NVD-CWE-Other
CVE-2004-1855 2017-07-11 10:31 2004-03-23 Show GitHub Exploit DB Packet Storm
345818 - hp web_jetadmin devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory. NVD-CWE-Other
CVE-2004-1856 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm
345819 - hp web_jetadmin Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter. NVD-CWE-Other
CVE-2004-1857 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm
345820 - trend_micro interscan_viruswall_for_windows_nt Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. NVD-CWE-Other
CVE-2004-1859 2017-07-11 10:31 2004-03-24 Show GitHub Exploit DB Packet Storm