Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3841	9.9	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-40453	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3842	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40473	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3843	8.8	重要 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40858	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3844	9.8	緊急 Network	Apache Software Foundation	Apache Camel	Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性	CWE-502 信頼性のないデータのデシリアライゼーション	CVE-2026-40860	2026-04-30 11:02	2026-04-27	Show	GitHub Exploit DB Packet Storm

3845	7.7	重要 Network	argoproj	Argo Workflows	Argo Project AuthorsのArgo Workflowsにおける配列インデックスの検証に関する脆弱性	CWE-129 配列インデックスの不適切な検証	CVE-2026-40886	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3846	5.3	警告 Adjacent	opentelemetry	opentelemetry	opentelemetryにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-40891	2026-04-30 11:02	2026-04-23	Show	GitHub Exploit DB Packet Storm

3847	7.8	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-40915	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3848	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-40916	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3849	7.1	重要 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-40917	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

3850	5.5	警告 Local	レッドハット gimp	Red Hat Enterprise Linux gimp	gimp等の複数ベンダの製品におけるバッファサイズの計算の誤りに関する脆弱性	CWE-131 正しくないバッファサイズ計算	CVE-2026-40918	2026-04-30 11:02	2026-04-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
349571	-	apple	itunes	Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2005-2938	2011-03-10 14:00	2005-11-18	Show	GitHub Exploit DB Packet Storm

349572	-	django_project	django	The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con…	CWE-352 Origin Validation Error	CVE-2008-3909	2011-03-8 12:11	2008-09-5	Show	GitHub Exploit DB Packet Storm

349573	-	cchost	cchost	SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some…	NVD-CWE-Other	CVE-2006-4778	2011-03-8 11:42	2006-09-14	Show	GitHub Exploit DB Packet Storm

349574	-	roxio	toast	Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are execu…	CWE-362 Race Condition	CVE-2006-4801	2011-03-8 11:42	2006-09-15	Show	GitHub Exploit DB Packet Storm

349575	-	iodine	iodine	Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."	NVD-CWE-Other	CVE-2006-4831	2011-03-8 11:42	2006-09-16	Show	GitHub Exploit DB Packet Storm

349576	-	iodine	iodine	This vulnerability is addressed in the following product release: Iodine, Iodine, 0.3.2	NVD-CWE-Other	CVE-2006-4831	2011-03-8 11:42	2006-09-16	Show	GitHub Exploit DB Packet Storm

349577	-	joomla	joomla	Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers to perform the emailform and emailsend tasks.	NVD-CWE-Other	CVE-2006-4473	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

349578	-	joomla	joomla	Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2006-4475	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

349579	-	joomla	joomla	Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of requir…	CWE-94 CWE-264 Code Injection Permissions, Privileges, and Access Controls	CVE-2006-4476	2011-03-8 11:41	2006-09-1	Show	GitHub Exploit DB Packet Storm

349580	-	ibm	aix	Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.	NVD-CWE-Other	CVE-2006-4522	2011-03-8 11:41	2006-09-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed