Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3811	9.8	緊急 Network	JetBrains	Junie	JetBrainsのJunieにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-41153	2026-04-30 12:27	2026-04-17	Show	GitHub Exploit DB Packet Storm

3812	8.1	重要 Network	Statamic	Statamic	Statamicにおけるクラスまたはコードを選択する外部から制御された入力の使用に関する脆弱性	CWE-470 クラスまたはコードを選択する外部から制御された入力の使用	CVE-2026-41175	2026-04-30 12:27	2026-04-22	Show	GitHub Exploit DB Packet Storm

3813	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2026-41176	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3814	9.8	緊急 Network	Rclone	Rclone	Rcloneにおける複数の脆弱性	CWE-306 CWE-78	CVE-2026-41179	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3815	9.9	緊急 Network	Froxlor	Froxlor	FroxlorにおけるPHP リモートファイルインクルージョンの脆弱性	CWE-98 PHP リモートファイルインクルージョン	CVE-2026-41228	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3816	9.1	緊急 Network	Froxlor	Froxlor	Froxlorにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-41229	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3817	8.5	重要 Network	Froxlor	Froxlor	FroxlorにおけるCRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2026-41230	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3818	7.5	重要 Network	Froxlor	Froxlor	Froxlorにおけるリンク解釈に関する脆弱性	CWE-59 リンク解釈の問題	CVE-2026-41231	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3819	5	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41232	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

3820	5.4	警告 Network	Froxlor	Froxlor	Froxlorにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-41233	2026-04-30 12:27	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
347631	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejec…	NVD-CWE-Other	CVE-2004-1756	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

347632	-	bea	weblogic_server	BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges.	NVD-CWE-Other	CVE-2004-1757	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347633	-	bea	weblogic_server	BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in co…	NVD-CWE-Other	CVE-2004-1758	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

347634	-	cisco ibm	emergency_responder ip_call_center_express_enhanced ip_call_center_express_standard ip_interactive_voice_response personal_assistant director_agent call_manager internet_service_…	Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 1…	CWE-399 Resource Management Errors	CVE-2004-1759	2017-07-11 10:31	2004-01-21	Show	GitHub Exploit DB Packet Storm

347635	-	cisco ibm	emergency_responder ip_call_center_express_enhanced ip_call_center_express_standard ip_interactive_voice_response personal_assistant director_agent call_manager internet_service_…	The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain adminis…	CWE-287 Improper Authentication	CVE-2004-1760	2017-07-11 10:31	2004-01-21	Show	GitHub Exploit DB Packet Storm

347636	-	f-secure	f-secure_anti-virus	Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.	NVD-CWE-Other	CVE-2004-1762	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347637	-	haht_commerce	hahtsite_scenario_server	Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project n…	NVD-CWE-Other	CVE-2004-1763	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347638	-	mod_security	mod_security	Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.	NVD-CWE-Other	CVE-2004-1765	2017-07-11 10:31	2004-12-31	Show	GitHub Exploit DB Packet Storm

347639	-	-	-	The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain se…	NVD-CWE-Other	CVE-2004-1766	2017-07-11 10:31	2004-01-20	Show	GitHub Exploit DB Packet Storm

347640	-	symantec	brightmail_antispam	The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages wit…	NVD-CWE-Other	CVE-2004-1768	2017-07-11 10:31	2004-12-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed