Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3671 9.8 緊急
Network 		PgBouncer PgBouncer PgBouncerにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-6665 2026-05-18 12:10 2026-05-9 Show GitHub Exploit DB Packet Storm
3672 7.5 重要
Network 		PgBouncer PgBouncer PgBouncerにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-6666 2026-05-18 12:09 2026-05-9 Show GitHub Exploit DB Packet Storm
3673 4.3 警告
Network 		PgBouncer PgBouncer PgBouncerにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-6667 2026-05-18 12:09 2026-05-9 Show GitHub Exploit DB Packet Storm
3674 5.3 警告
Network 		Haxx cURL HaxxのcURLにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-7009 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
3675 5.3 警告
Network 		Haxx cURL HaxxのcURLにおけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-7168 2026-05-18 12:09 2026-05-13 Show GitHub Exploit DB Packet Storm
3676 3.5 低
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-7471 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
3677 5.4 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-7481 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
3678 5.5 警告
Local 		GPAC GPAC GPACにおける複数の脆弱性 CWE-400
CWE-770
CVE-2026-8124 2026-05-18 12:09 2026-05-8 Show GitHub Exploit DB Packet Storm
3679 4.3 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-8144 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
3680 6.5 警告
Network 		GitLab.org GitLab GitLab.orgのGitLabにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-8280 2026-05-18 12:09 2026-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346101 - open_group
xi_graphics
ibm 		cde_common_desktop_environment
dextop
aix 		Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2004-0368 2017-10-11 10:29 2004-05-4 Show GitHub Exploit DB Packet Storm
346102 - cvs cvs Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. NVD-CWE-Other
CVE-2004-0396 2017-10-11 10:29 2004-06-14 Show GitHub Exploit DB Packet Storm
346103 - kame racoon Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field. NVD-CWE-Other
CVE-2004-0403 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
346104 - cvs cvs CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180. NVD-CWE-Other
CVE-2004-0405 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
346105 - xchat xchat Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0409 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
346106 - linux
redhat
trustix 		linux_kernel
fedora_core
secure_linux 		Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory. NVD-CWE-Other
CVE-2004-0415 2017-10-11 10:29 2004-11-23 Show GitHub Exploit DB Packet Storm
346107 - x.org
xfree86_project
gentoo 		x11r6
xdm
linux 		XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. NVD-CWE-Other
CVE-2004-0419 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
346108 - andrew_tridgell rsync rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path. NVD-CWE-Other
CVE-2004-0426 2017-10-11 10:29 2004-07-7 Show GitHub Exploit DB Packet Storm
346109 - linux linux_kernel Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. … NVD-CWE-Other
CVE-2004-0447 2017-10-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
346110 - larry_wall perl Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, a… NVD-CWE-Other
CVE-2004-0452 2017-10-11 10:29 2004-12-21 Show GitHub Exploit DB Packet Storm