Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
141 6.5 警告
Network 		FreeBSD FreeBSD FreeBSDにおける権限管理に関する脆弱性 New CWE-269
不適切な権限管理 		CVE-2026-45254 2026-05-25 10:19 2026-05-21 Show GitHub Exploit DB Packet Storm
142 7.5 重要
Adjacent 		FreeBSD FreeBSD FreeBSDにおけるOS コマンドインジェクションの脆弱性 New CWE-78
OSコマンド・インジェクション 		CVE-2026-45255 2026-05-25 10:19 2026-05-21 Show GitHub Exploit DB Packet Storm
143 3.5 低
Network 		GitHub cli GitHubのcliにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 New CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 		CVE-2026-45803 2026-05-25 10:19 2026-05-15 Show GitHub Exploit DB Packet Storm
144 8.1 重要
Network 		Memcached Memcached Memcachedにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 New CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-47783 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
145 8.1 重要
Network 		Memcached Memcached Memcachedにおけるタイミングの違いに起因する情報漏えいに関する脆弱性 New CWE-208
タイミングの違いに起因する情報漏えい 		CVE-2026-47784 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
146 9.9 緊急
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-4858 2026-05-25 10:19 2026-05-21 Show GitHub Exploit DB Packet Storm
147 5.5 警告
Local 		WebAssembly Binaryen WebAssemblyのBinaryenにおける到達可能なアサーションに関する脆弱性 New CWE-617
到達可能なアサーション 		CVE-2026-8257 2026-05-25 10:19 2026-05-11 Show GitHub Exploit DB Packet Storm
148 7.5 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-8486 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
149 7.5 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける不適切なデフォルトパーミッションに関する脆弱性 New CWE-276
不適切なデフォルトパーミッション 		CVE-2026-8487 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
150 7.5 重要
Network 		Progress Software Corporation MOVEit Automation Web Admin Progress Software CorporationのMOVEit Automation Web Adminにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-8488 2026-05-25 10:19 2026-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345771 - ratbag dirt_track_racing
dirt_track_racing_australia
dirt_track_racing_sprint_cars
leadfoot
world_of_outlaws_sprint_cars 		Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet … NVD-CWE-Other
CVE-2004-0278 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345772 - aim_sniff aim_sniff AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log. NVD-CWE-Other
CVE-2004-0279 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345773 - caucho_technology resin Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20. NVD-CWE-Other
CVE-2004-0280 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345774 - crob crob_ftp_server Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server. NVD-CWE-Other
CVE-2004-0282 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345775 - mailmgr mailmgr Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort. NVD-CWE-Other
CVE-2004-0283 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345776 - robotftp robotftp_server Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username. NVD-CWE-Other
CVE-2004-0286 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345777 - xlight_ftp_server xlight_ftp_server Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly trigg… NVD-CWE-Other
CVE-2004-0287 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345778 - mnogosearch mnogosearch Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document. NVD-CWE-Other
CVE-2004-0288 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345779 - paul_l_daniels signaturedb Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter. NVD-CWE-Other
CVE-2004-0289 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm
345780 - freeform_interactive purge
purge_jihad 		Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields. NVD-CWE-Other
CVE-2004-0290 2017-07-11 10:30 2004-11-23 Show GitHub Exploit DB Packet Storm