Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1841	8.8	重要 Network	Mozilla Foundation	Mozilla Firefox Mozilla Thunderbird	Mozilla FoundationのMozilla Firefox等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-8975	2026-05-22 10:51	2026-05-19	Show	GitHub Exploit DB Packet Storm

1842	3.3	低 Local	Siber Systems Inc.	RoboForm Password Manager	Androidアプリ「パスワード管理ロボフォーム」のintent処理における検証不備の脆弱性	CWE-357 危険な操作に対する不十分な警告	CVE-2026-47782	2026-05-21 16:37	2026-05-20	Show	GitHub Exploit DB Packet Storm

1843	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月19日）	-	-	2026-05-21 16:17	2026-05-20	Show	GitHub Exploit DB Packet Storm

1844	6.1	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-24710	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1845	5.3	警告 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-24711	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1846	7.3	重要 Network	Northern.tech	cfengine	Northern.techのcfengineにおけるコマンドインジェクションの脆弱性	CWE-77 コマンドインジェクション	CVE-2026-24712	2026-05-21 10:55	2026-05-14	Show	GitHub Exploit DB Packet Storm

1847	9.8	緊急 Network	Open JS Foundation	WebdriverIO	Open JS FoundationのWebdriverIOにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-25244	2026-05-21 10:55	2026-05-18	Show	GitHub Exploit DB Packet Storm

1848	6.5	警告 Network	マイクロソフト	Power Automate for Desktop	Microsoft Power Automate デスクトップの情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2026-40374	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

1849	7.8	重要 Local	protobufjs project	protobufjs-cli	protobufjs projectのprotobufjs-cliにおけるOS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2026-42290	2026-05-21 10:55	2026-05-13	Show	GitHub Exploit DB Packet Storm

1850	6.1	警告 Network	beaugunderson	ip-address	beaugundersonのip-addressにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42338	2026-05-21 10:55	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345071	-	oliver_rauch	xsane	xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.	NVD-CWE-Other	CVE-2001-0887	2017-10-10 10:29	2002-01-15	Show	GitHub Exploit DB Packet Storm

345072	-	atmel linksys netgear	firmware wap11 me102	Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which cau…	NVD-CWE-Other	CVE-2001-0888	2017-10-10 10:29	2001-12-21	Show	GitHub Exploit DB Packet Storm

345073	-	university_of_cambridge redhat	exim linux	Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary co…	NVD-CWE-Other	CVE-2001-0889	2017-10-10 10:29	2001-12-19	Show	GitHub Exploit DB Packet Storm

345074	-	sgi cray	nqsdaemon unicos	Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains …	NVD-CWE-Other	CVE-2001-0891	2017-10-10 10:29	2002-01-31	Show	GitHub Exploit DB Packet Storm

345075	-	wietse_venema	postfix	Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of servic…	NVD-CWE-Other	CVE-2001-0894	2017-10-10 10:29	2001-11-11	Show	GitHub Exploit DB Packet Storm

345076	-	cisco	catalyst_2900xl catalyst_2948g-l3 catalyst_2950 catalyst_3500xl catalyst_3550 catalyst_4000 catalyst_4908g-l3 catalyst_5000 catalyst_6000 catalyst_8500 distributed_direc…	Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC ad…	NVD-CWE-Other	CVE-2001-0895	2017-10-10 10:29	2001-11-15	Show	GitHub Exploit DB Packet Storm

345077	-	sco	openserver	Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.	NVD-CWE-Other	CVE-2001-0896	2017-10-10 10:29	2001-11-30	Show	GitHub Exploit DB Packet Storm

345078	-	francisco_burzi	gallery	Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.	NVD-CWE-Other	CVE-2001-0900	2017-10-10 10:29	2001-11-18	Show	GitHub Exploit DB Packet Storm

345079	-	procmail	procmail	Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handlin…	NVD-CWE-Other	CVE-2001-0905	2017-10-10 10:29	2001-10-18	Show	GitHub Exploit DB Packet Storm

345080	-	tetex	tetex	teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.	NVD-CWE-Other	CVE-2001-0906	2017-10-10 10:29	2001-06-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed