Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3131 7.5 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2025-14870 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
3132 5.6 警告
Network
デル elastic cloud storage
Dell ObjectScale
デルのelastic cloud storage等の複数製品における認証回避の脆弱性 CWE-302
認証回避の脆弱性
CVE-2025-43992 2026-05-18 12:08 2026-05-11 Show GitHub Exploit DB Packet Storm
3133 6.7 警告
Local
フォーティネット FortiAP-U
FortiAP
FortiAP-W2
フォーティネットのFortiAP-U等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-53680 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
3134 7.2 重要
Network
フォーティネット FortiMail フォーティネットのFortiMailにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2025-53681 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
3135 8.8 重要
Network
フォーティネット FortiOS フォーティネットのFortiOSにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2025-53844 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
3136 6.7 警告
Local
フォーティネット FortiAP
FortiAP-W2
フォーティネットのFortiAP-W2等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2025-53870 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
3137 5.3 警告
Network
strapi strapi strapiにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限
CVE-2025-64526 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
3138 5.3 警告
Network
フォーティネット FortiManager
FortiAnalyzer
フォーティネットのFortiAnalyzer等の複数製品における潜在的に危険な関数の使用に関する脆弱性 CWE-676
潜在的に危険な関数の使用
CVE-2025-67604 2026-05-18 12:08 2026-05-12 Show GitHub Exploit DB Packet Storm
3139 7.5 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-1184 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
3140 8.1 重要
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるビジネスロジックエラーに関する脆弱性 CWE-840
ビジネスロジックエラー
CVE-2026-1322 2026-05-18 12:08 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345631 - lesstif
x.org
xfree86_project
gentoo
redhat
suse
lesstif
x11r6
linux
fedora_core
suse_linux
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4… NVD-CWE-Other
CVE-2004-0914 2017-10-11 10:29 2005-01-10 Show GitHub Exploit DB Packet Storm
345632 - openpkg
squid
gentoo
redhat
trustix
ubuntu
openpkg
squid
linux
fedora_core
secure_linux
ubuntu_linux
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets w… CWE-399
 Resource Management Errors
CVE-2004-0918 2017-10-11 10:29 2005-01-27 Show GitHub Exploit DB Packet Storm
345633 - easy_software_products
apple
cups
mac_os_x
mac_os_x_server
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords. NVD-CWE-Other
CVE-2004-0923 2017-10-11 10:29 2005-01-27 Show GitHub Exploit DB Packet Storm
345634 - samba
sgi
conectiva
gentoo
redhat
samba
linux
enterprise_linux
enterprise_linux_desktop
fedora_core
linux_advanced_workstation
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multipl… NVD-CWE-Other
CVE-2004-0930 2017-10-11 10:29 2005-01-27 Show GitHub Exploit DB Packet Storm
345635 - freeradius freeradius FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet. NVD-CWE-Other
CVE-2004-0938 2017-10-11 10:29 2004-11-3 Show GitHub Exploit DB Packet Storm
345636 - linux
redhat
suse
trustix
ubuntu
linux_kernel
enterprise_linux
enterprise_linux_desktop
fedora_core
linux_advanced_workstation
suse_linux
secure_linux
ubuntu_linux
The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba … NVD-CWE-Other
CVE-2004-0949 2017-10-11 10:29 2005-01-10 Show GitHub Exploit DB Packet Storm
345637 - hp hp-ux HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote… NVD-CWE-Other
CVE-2004-0952 2017-10-11 10:29 2004-12-31 Show GitHub Exploit DB Packet Storm
345638 - php php php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PH… NVD-CWE-Other
CVE-2004-0958 2017-10-11 10:29 2004-11-3 Show GitHub Exploit DB Packet Storm
345639 - php php rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified. NVD-CWE-Other
CVE-2004-0959 2017-10-11 10:29 2004-11-3 Show GitHub Exploit DB Packet Storm
345640 - freeradius
redhat
freeradius
enterprise_linux
fedora_core
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument. NVD-CWE-Other
CVE-2004-0960 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm