Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4041 6.8 警告
Physics
ZTE ZX297520V3 ファームウェア ZTEのZX297520V3 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-40003 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
4042 7.8 重要
Local
ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2026-40004 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
4043 6.5 警告
Network
Zulip Zulip Server ZulipのZulip Serverにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-40300 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4044 6.5 警告
Network
NocoBase NocoBase NocoBaseにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-40346 2026-05-15 11:01 2026-04-18 Show GitHub Exploit DB Packet Storm
4045 8.8 重要
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-40357 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4046 8.8 重要
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-1220
アクセス制御の不十分な粒度
CVE-2026-40365 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4047 8 重要
Network
マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-40368 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4048 5.5 警告
Local
jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-40612 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
4049 7.5 重要
Network
PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-40863 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4050 5.5 警告
Local
jqlang jq jqlangのjqにおけるNULL バイトまたは NULL キャラクタの無害化に関する脆弱性 CWE-158
NULL バイトまたは NULL キャラクタの不適切な無害化
CVE-2026-41256 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346121 - avaya
gentoo
linux
redhat
suse
conectiva
converged_communications_server
modular_messaging_message_storage_server
linux
linux_kernel
enterprise_linux
suse_linux
intuity_audix
suse_email_server
suse_linux_admin-cd_for…
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and … NVD-CWE-Other
CVE-2004-0554 2017-10-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
346122 - mandrakesoft
gentoo
linux
trustix
mandrake_multi_network_firewall
linux
linux_kernel
mandrake_linux
mandrake_linux_corporate_server
secure_linux
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other process… NVD-CWE-Other
CVE-2004-0565 2017-10-11 10:29 2004-12-6 Show GitHub Exploit DB Packet Storm
346123 - mandrakesoft
redhat
suse
mandrake_linux
mandrake_linux_corporate_server
fedora_core
suse_linux
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service. NVD-CWE-Other
CVE-2004-0587 2017-10-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
346124 - greg_roelofs libpng The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference. NVD-CWE-Other
CVE-2004-0598 2017-10-11 10:29 2004-11-23 Show GitHub Exploit DB Packet Storm
346125 - greg_roelofs libpng Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow re… NVD-CWE-Other
CVE-2004-0599 2017-10-11 10:29 2004-11-23 Show GitHub Exploit DB Packet Storm
346126 - samba
trustix
samba
secure_linux
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication. NVD-CWE-Other
CVE-2004-0600 2017-10-11 10:29 2004-07-27 Show GitHub Exploit DB Packet Storm
346127 - ipsec-tools
kame
redhat
ipsec-tools
racoon
enterprise_linux
enterprise_linux_desktop
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication. NVD-CWE-Other
CVE-2004-0607 2017-10-11 10:29 2004-12-6 Show GitHub Exploit DB Packet Storm
346128 - redhat fedora_core
linux
kernel
Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add… NVD-CWE-Other
CVE-2004-0619 2017-10-11 10:29 2004-12-6 Show GitHub Exploit DB Packet Storm
346129 - sun solaris Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could al… NVD-CWE-Other
CVE-2004-0653 2017-10-11 10:29 2004-08-6 Show GitHub Exploit DB Packet Storm
346130 - linux
redhat
trustix
linux_kernel
enterprise_linux
enterprise_linux_desktop
secure_linux
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cle… NVD-CWE-Other
CVE-2004-0685 2017-10-11 10:29 2004-12-23 Show GitHub Exploit DB Packet Storm