Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
1661 7.3 重要
Local
AIOHTTP AIOHTTP AIOHTTPにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-34993 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
1662 3.1
Network
Django Software Foundation Django Django Software FoundationのDjangoにおける重要な情報を含むキャッシュの使用に関する脆弱性 CWE-524
重要な情報を含むキャッシュの使用
CVE-2026-35193 2026-06-8 12:31 2026-06-3 Show GitHub Exploit DB Packet Storm
1663 6.1 警告
Network
citeum opencti citeumのopenctiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-35212 2026-06-8 12:31 2026-06-2 Show GitHub Exploit DB Packet Storm
1664 8.2 重要
Network
Mosaic5G Flexric Mosaic5GのFlexricにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-37234 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
1665 7.8 重要
Local
radare radare2 radareのradare2におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-40527 2026-06-8 12:31 2026-04-17 Show GitHub Exploit DB Packet Storm
1666 7.5 重要
Network
quic-go project quic-go quic-go projectのquic-goにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-40898 2026-06-8 12:31 2026-06-4 Show GitHub Exploit DB Packet Storm
1667 6.5 警告
Network
VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-40989 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
1668 6.5 警告
Network
VMware Spring Cloud Function VMwareのSpring Cloud Functionにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-40990 2026-06-8 12:31 2026-06-1 Show GitHub Exploit DB Packet Storm
1669 7.5 重要
Network
librechat librechat LibreChatにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-4276 2026-06-8 12:31 2026-03-16 Show GitHub Exploit DB Packet Storm
1670 4.8 警告
Network
ERLANG Erlang/OTP ERLANGのErlang/OTPにおける複数の脆弱性 CWE-295
CWE-296
CVE-2026-42789 2026-06-8 12:31 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344151 - microsoft outlook_express The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Inte… NVD-CWE-Other
CVE-2004-0380 2018-10-13 06:34 2004-05-4 Show GitHub Exploit DB Packet Storm
344152 - microsoft windows_nt The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper le… NVD-CWE-Other
CVE-2004-0569 2018-10-13 06:34 2004-11-3 Show GitHub Exploit DB Packet Storm
344153 - microsoft grpconv Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not prop… NVD-CWE-Other
CVE-2004-0572 2018-10-13 06:34 2004-11-3 Show GitHub Exploit DB Packet Storm
344154 - microsoft windows_2003_server
windows_xp
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via… NVD-CWE-Other
CVE-2004-0575 2018-10-13 06:34 2004-11-3 Show GitHub Exploit DB Packet Storm
344155 - greg_roelofs
microsoft
libpng
msn_messenger
windows_media_player
windows_messenger
windows_98se
windows_me
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS functio… NVD-CWE-Other
CVE-2004-0597 2018-10-13 06:34 2004-11-23 Show GitHub Exploit DB Packet Storm
344156 - microsoft virtual_pc VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCService… NVD-CWE-Other
CVE-2004-0115 2018-10-13 06:33 2004-03-3 Show GitHub Exploit DB Packet Storm
344157 - microsoft windows_2000
windows_2003_server
windows_xp
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an act… NVD-CWE-Other
CVE-2004-0116 2018-10-13 06:33 2004-06-1 Show GitHub Exploit DB Packet Storm
344158 - microsoft netmeeting
windows_2000
windows_2003_server
windows_98
windows_me
windows_xp
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2004-0117 2018-10-13 06:33 2004-06-1 Show GitHub Exploit DB Packet Storm
344159 - microsoft windows_2000
windows_nt
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory a… NVD-CWE-Other
CVE-2004-0118 2018-10-13 06:33 2004-06-1 Show GitHub Exploit DB Packet Storm
344160 - microsoft windows_2000
windows_2003_server
windows_xp
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages. NVD-CWE-Other
CVE-2004-0120 2018-10-13 06:33 2004-06-1 Show GitHub Exploit DB Packet Storm