Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
5001	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43374	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

5002	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性	CWE-401 有効期限後のメモリの解放の欠如	CVE-2026-43375	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

5003	9.8	緊急 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-43376	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

5004	8.1	重要 Network	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43377	2026-05-18 11:26	2026-05-8	Show	GitHub Exploit DB Packet Storm

5005	9.8	緊急 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける認証回避に関する脆弱性	CWE-592 認証回避の問題	CVE-2026-43512	2026-05-18 11:26	2026-05-12	Show	GitHub Exploit DB Packet Storm

5006	7.5	重要 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける大文字と小文字の区別の不適切な処理に関する脆弱性	CWE-178 大文字と小文字の区別の不適切な処理	CVE-2026-43513	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

5007	9.1	緊急 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-43515	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

5008	7.5	重要 Network	Web Technologies	Change Detection	Web TechnologiesのChange Detectionにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-43891	2026-05-18 11:25	2026-05-12	Show	GitHub Exploit DB Packet Storm

5009	8.7	重要 Network	Daniel Garcia	Vaultwarden	Daniel GarciaのVaultwardenにおける認可に関する脆弱性	CWE-285 不適切な認可	CVE-2026-43912	2026-05-18 11:25	2026-05-11	Show	GitHub Exploit DB Packet Storm

5010	9.1	緊急 Network	OPNsense project	OPNsense	OPNsenseにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-44193	2026-05-18 11:25	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
353581	-	tiki	tikiwiki_cms\/groupware	Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_director…	CWE-200 Information Exposure	CVE-2004-1923	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

353582	-	tiki	tikiwiki_cms\/groupware	Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (…	CWE-22 Path Traversal	CVE-2004-1927	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

353583	-	tiki	tikiwiki_cms\/groupware	Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to…	CWE-79 Cross-site Scripting	CVE-2004-1924	2017-07-11 10:31	2004-04-11	Show	GitHub Exploit DB Packet Storm

353584	-	tiki	tikiwiki_cms\/groupware	Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php…	CWE-89 SQL Injection	CVE-2004-1925	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

353585	-	tiki	tikiwiki_cms\/groupware	The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.	CWE-20 Improper Input Validation	CVE-2004-1928	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

353586	-	francisco_burzi	php-nuke	SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code …	NVD-CWE-Other	CVE-2004-1929	2017-07-11 10:31	2004-04-13	Show	GitHub Exploit DB Packet Storm

353587	-	francisco_burzi	php-nuke	Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTM…	NVD-CWE-Other	CVE-2004-1930	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

353588	-	francisco_burzi	php-nuke	SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded …	NVD-CWE-Other	CVE-2004-1932	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

353589	-	-	-	Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.	NVD-CWE-Other	CVE-2004-1933	2017-07-11 10:31	2004-04-12	Show	GitHub Exploit DB Packet Storm

353590	-	isesam	gemitel	PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.	NVD-CWE-Other	CVE-2004-1934	2017-07-11 10:31	2004-04-15	Show	GitHub Exploit DB Packet Storm