Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1711 5.4 警告
Network 		reconurge Flowsint Flowsintにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42159 2026-05-25 10:25 2026-05-14 Show GitHub Exploit DB Packet Storm
1712 8.6 重要
Network 		MagicMirror MagicMirror MagicMirrorにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42281 2026-05-25 10:25 2026-05-14 Show GitHub Exploit DB Packet Storm
1713 6.1 警告
Network 		Absinthe-graphql Absinthe.Plug (absinthe plug) Absinthe-graphqlのAbsinthe.Plug (absinthe plug)におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42794 2026-05-25 10:25 2026-05-8 Show GitHub Exploit DB Packet Storm
1714 4.3 警告
Network 		Getinboxzero Inbox Zero GetinboxzeroのInbox Zeroにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-42865 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1715 4 警告
Network 		Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-43968 2026-05-25 10:25 2026-05-11 Show GitHub Exploit DB Packet Storm
1716 3.2 低
Local 		Nine Nines Cowlib Nine NinesのCowlibにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-43969 2026-05-25 10:24 2026-05-11 Show GitHub Exploit DB Packet Storm
1717 6.1 警告
Network 		Boscop Orejime GayaのOrejimeにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6095 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
1718 6.1 警告
Network 		Drupal Obfuscate Obfuscateにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-6871 2026-05-25 10:24 2026-05-19 Show GitHub Exploit DB Packet Storm
1719 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-71266 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
1720 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける無限ループに関する脆弱性 CWE-835
無限ループ 		CVE-2025-71267 2026-05-25 10:24 2026-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345141 - gnome
redhat 		gdm
kdebase 		GDM before 2.4.1.6, when using the "examine session errors" feature, allows local users to read arbitrary files via a symlink attack on the ~/.xsession-errors file. NVD-CWE-Other
CVE-2003-0547 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345142 - gnome
redhat 		gdm
kdebase
enterprise_linux
linux_advanced_workstation 		The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) when a chosen host expires, a different issue than CVE-2003-… NVD-CWE-Other
CVE-2003-0548 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345143 - gnome
redhat 		gdm
kdebase
enterprise_linux
linux_advanced_workstation 		The X Display Manager Control Protocol (XDMCP) support for GDM before 2.4.1.6 allows attackers to cause a denial of service (daemon crash) via a short authorization key name. NVD-CWE-Other
CVE-2003-0549 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345144 - redhat linux The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology. NVD-CWE-Other
CVE-2003-0550 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345145 - redhat linux The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service. NVD-CWE-Other
CVE-2003-0551 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345146 - redhat linux Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target. NVD-CWE-Other
CVE-2003-0552 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345147 - hitachi groupmax_mail_-_security_option
pki_runtime_library 		Multiple vulnerabilities in multiple vendor implementations of the Secure/Multipurpose Internet Mail Extensions (S/MIME) protocol allow remote attackers to cause a denial of service and possibly exec… NVD-CWE-Other
CVE-2003-0564 2017-10-11 10:29 2003-12-1 Show GitHub Exploit DB Packet Storm
345148 - kde konqueror
konqueror_embedded 		Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in… NVD-CWE-Other
CVE-2003-0592 2017-10-11 10:29 2004-04-15 Show GitHub Exploit DB Packet Storm
345149 - mozilla mozilla Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send … NVD-CWE-Other
CVE-2003-0594 2017-10-11 10:29 2004-04-15 Show GitHub Exploit DB Packet Storm
345150 - linux linux_kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR … NVD-CWE-Other
CVE-2003-0619 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm