Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4351 7 重要
Local 		レッドハット
libssh		 libssh
Red Hat Hardened Images 		libssh等の複数ベンダの製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-14821 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
4352 10 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-29
パストラバーサル (/../filename) 		CVE-2025-15036 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
4353 9.8 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-15379 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
4354 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-15381 2026-04-30 12:17 2026-03-27 Show GitHub Exploit DB Packet Storm
4355 7.5 重要
Network 		Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおけるメモリ管理ルーチンの不一致に関する脆弱性 CWE-762
メモリ管理ルーチンの不一致 		CVE-2025-48431 2026-04-30 12:17 2026-04-28 Show GitHub Exploit DB Packet Storm
4356 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2025-59969 2026-04-30 12:17 2026-04-9 Show GitHub Exploit DB Packet Storm
4357 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1839 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
4358 6.1 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20059 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
4359 4.7 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-20060 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
4360 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-20061 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349321 - evan_sims effingerd Buffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a long finger command. NVD-CWE-Other
CVE-2004-2272 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349322 - w3c jigsaw Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI. NVD-CWE-Other
CVE-2004-2274 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349323 - i-mall_commerce i-mall.cgi i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter. NVD-CWE-Other
CVE-2004-2275 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349324 - - - F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which … NVD-CWE-Other
CVE-2004-2276 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349325 - agsm agsm Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server response. NVD-CWE-Other
CVE-2004-2277 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349326 - chaogic_systems vhost Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors. NVD-CWE-Other
CVE-2004-2278 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349327 - invision_power_services invision_power_board Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php. NVD-CWE-Other
CVE-2004-2279 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349328 - open_webmail open_webmail The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument. NVD-CWE-Other
CVE-2004-2284 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349329 - activestate
larry_wall 		activeperl
perl 		Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a… NVD-CWE-Other
CVE-2004-2286 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm
349330 - - - Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically … NVD-CWE-Other
CVE-2004-2290 2017-07-11 10:31 2004-12-31 Show GitHub Exploit DB Packet Storm