Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1101 8.1 重要
Network 		Zabbix Zabbix Zabbixにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-23925 2026-06-8 12:32 2026-03-6 Show GitHub Exploit DB Packet Storm
1102 5.3 警告
Network 		OpenStack Openstack Keystone OpenStackのOpenstack Keystoneにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-33551 2026-06-8 12:32 2026-04-10 Show GitHub Exploit DB Packet Storm
1103 6.5 警告
Network 		Mattermost, Inc. Mattermost Desktop Mattermost, Inc.のMattermost Desktopにおけるカスタム URL スキームのハンドラの不適切な認可に関する脆弱性 CWE-939
カスタム URL スキームのハンドラの不適切な認可 		CVE-2026-3471 2026-06-8 12:32 2026-05-18 Show GitHub Exploit DB Packet Storm
1104 7.3 重要
Local 		AIOHTTP AIOHTTP AIOHTTPにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-34993 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
1105 3.1 低
Network 		Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-35193 2026-06-8 12:31 2026-06-3 Show GitHub Exploit DB Packet Storm
1106 6.1 警告
Network 		citeum opencti citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-35212 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
1107 8.2 重要
Network 		Mosaic5G Flexric Mosaic5GのFlexricにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-37234 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
1108 7.8 重要
Local 		radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-40527 2026-06-8 12:31 2026-04-17 Show GitHub Exploit DB Packet Storm
1109 7.5 重要
Network 		quic-go project quic-go quic-go projectのquic-goにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40898 2026-06-8 12:31 2026-06-4 Show GitHub Exploit DB Packet Storm
1110 6.5 警告
Network 		VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-40989 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344771 - hp
sun 		virtualvault
iplanet_web_server 		Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. NVD-CWE-Other
CVE-2001-0606 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
344772 - hp mpe HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHAN… NVD-CWE-Other
CVE-2001-0608 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
344773 - kde
suse 		kde
suse_linux 		kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. NVD-CWE-Other
CVE-2001-0610 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
344774 - carello e-commerce Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. NVD-CWE-Other
CVE-2001-0614 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
344775 - alliedtelesyn at-ar220e Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single… NVD-CWE-Other
CVE-2001-0617 2017-12-19 11:29 2001-08-22 Show GitHub Exploit DB Packet Storm
344776 - lucent orinoco_rg-1000 Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear dur… NVD-CWE-Other
CVE-2001-0618 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
344777 - iplanet calendar_server iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator use… NVD-CWE-Other
CVE-2001-0620 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
344778 - sendfile sendfile sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain… NVD-CWE-Other
CVE-2001-0623 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
344779 - qnx qnx QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos. NVD-CWE-Other
CVE-2001-0624 2017-12-19 11:29 2001-08-2 Show GitHub Exploit DB Packet Storm
344780 - incredimail incredimail Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in t… NVD-CWE-Other
CVE-2001-0642 2017-12-19 11:29 2001-09-20 Show GitHub Exploit DB Packet Storm