Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
431	8.4	重要 Local	マイクロソフト	Microsoft Office Office Long Term Servicing Channel (LTSC) Microsoft 365 Apps Microsoft SharePoint Server Microsoft Word	Microsoft Word のリモートでコードが実行される脆弱性	CWE-822 信頼性のないポインタデリファレンス	CVE-2026-40367	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

432	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40418	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

433	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40419	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

434	8.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40420	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

435	5.8	警告 Network	traefik	traefik	traefikにおける送信データへの重要な情報の挿入に関する脆弱性	CWE-201 送信データへの重要な情報の挿入	CVE-2026-41181	2026-05-21 10:52	2026-05-15	Show	GitHub Exploit DB Packet Storm

436	7.5	重要 Network	DHTMLX	PDF Export Module	DHTMLXのPDF Export Moduleにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41552	2026-05-21 10:52	2026-05-15	Show	GitHub Exploit DB Packet Storm

437	9.1	緊急 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるLDAP インジェクションの脆弱性	CWE-90 LDAP インジェクション	CVE-2026-41919	2026-05-21 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

438	9.1	緊急 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41947	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

439	9.4	緊急 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-41948	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

440	7.5	重要 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41949	2026-05-21 10:51	2026-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345681	-	rhinosoft	dns4me	The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.	NVD-CWE-Other	CVE-2004-1691	2017-07-11 10:31	2004-09-18	Show	GitHub Exploit DB Packet Storm

345682	-	mambo	mambo_open_source	Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.	NVD-CWE-Other	CVE-2004-1692	2017-07-11 10:31	2004-09-18	Show	GitHub Exploit DB Packet Storm

345683	-	mambo	mambo	PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a UR…	NVD-CWE-Other	CVE-2004-1693	2017-07-11 10:31	2004-09-18	Show	GitHub Exploit DB Packet Storm

345684	-	symantec	on_command_ccm on_icommand	Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access.	NVD-CWE-Other	CVE-2004-1694	2017-07-11 10:31	2004-09-21	Show	GitHub Exploit DB Packet Storm

345685	-	emulive	server4	EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).	NVD-CWE-Other	CVE-2004-1695	2017-07-11 10:31	2004-09-20	Show	GitHub Exploit DB Packet Storm

345686	-	emulive	server4	EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66.	NVD-CWE-Other	CVE-2004-1696	2017-07-11 10:31	2004-09-21	Show	GitHub Exploit DB Packet Storm

345687	-	-	-	The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could all…	NVD-CWE-Other	CVE-2004-1697	2017-07-11 10:31	2004-09-21	Show	GitHub Exploit DB Packet Storm

345688	-	leadmind	popmessenger	The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes se…	NVD-CWE-Other	CVE-2004-1698	2017-07-11 10:31	2004-09-24	Show	GitHub Exploit DB Packet Storm

345689	-	pinnacle_systems	showcenter	SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter.	NVD-CWE-Other	CVE-2004-1699	2017-07-11 10:31	2004-09-21	Show	GitHub Exploit DB Packet Storm

345690	-	pinnacle_systems	showcenter	Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echo…	NVD-CWE-Other	CVE-2004-1700	2017-07-11 10:31	2004-10-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed