Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2151 7.5 重要
Network 		Gleam-wisp Wisp Gleam-wispのWispにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-32145 2026-05-28 14:33 2026-04-2 Show GitHub Exploit DB Packet Storm
2152 7.5 重要
Network 		Elixir Plug Plug.cowboy Elixir PlugのPlug.cowboyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-32688 2026-05-28 14:33 2026-04-27 Show GitHub Exploit DB Packet Storm
2153 8.8 重要
Network 		9bis KiTTY KovidgoyalのKittyにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-33633 2026-05-28 14:33 2026-05-19 Show GitHub Exploit DB Packet Storm
2154 9.8 緊急
Network 		9bis KiTTY KovidgoyalのKittyにおける複数の脆弱性 CWE-125
CWE-190
CWE-787
CVE-2026-33642 2026-05-28 14:33 2026-05-19 Show GitHub Exploit DB Packet Storm
2155 7.5 重要
Network 		Tatsuhiro-t Ngtcp2 Tatsuhiro-tのNgtcp2におけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-40170 2026-05-28 14:33 2026-04-16 Show GitHub Exploit DB Packet Storm
2156 7.8 重要
Local 		opentelemetry OpenTelemetry.Exporter.OpenTelemetryProtocol opentelemetryのOpenTelemetry.Exporter.OpenTelemetryProtocolにおけるアクセスパーミションのディレクトリの一時ファイル作成に関する脆弱性 CWE-379
不適切なアクセスパーミションのディレクトリに一時ファイル作成 		CVE-2026-42191 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
2157 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-42793 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
2158 7.5 重要
Network 		Absinthe-graphql Absinthe Absinthe-graphqlのAbsintheにおけるアルゴリズムの複雑さに関する脆弱性 CWE-407
アルゴリズムの複雑性 		CVE-2026-43967 2026-05-28 14:32 2026-05-8 Show GitHub Exploit DB Packet Storm
2159 6.1 警告
Network 		The Kyverno Authors Policy-reporter-ui The Kyverno AuthorsのPolicy-reporter-uiにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-44245 2026-05-28 14:32 2026-05-12 Show GitHub Exploit DB Packet Storm
2160 8.6 重要
Network 		Marginal v1-core Marginalのv1-coreにおける数値型間の変換の誤りに関する脆弱性 CWE-681
数値型間の変換の誤り 		CVE-2026-4931 2026-05-28 14:32 2026-04-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344691 - microsoft outlook_express Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain… NVD-CWE-Other
CVE-2001-0999 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm
344692 - merit aaa_radius_server rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file. NVD-CWE-Other
CVE-2001-1000 2017-12-19 11:29 2001-09-7 Show GitHub Exploit DB Packet Storm
344693 - suse suse_linux Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/. NVD-CWE-Other
CVE-2001-1012 2017-12-19 11:29 2001-09-5 Show GitHub Exploit DB Packet Storm
344694 - redhat linux Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, whic… NVD-CWE-Other
CVE-2001-1013 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm
344695 - michael_boehme webdiscount_e_shop_online_shop_system eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter. NVD-CWE-Other
CVE-2001-1014 2017-12-19 11:29 2001-09-15 Show GitHub Exploit DB Packet Storm
344696 - lotus domino Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters. NVD-CWE-Other
CVE-2001-1018 2017-12-19 11:29 2001-09-20 Show GitHub Exploit DB Packet Storm
344697 - seaglass_technologies_inc. sglmerchant Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter. NVD-CWE-Other
CVE-2001-1019 2017-12-19 11:29 2001-09-8 Show GitHub Exploit DB Packet Storm
344698 - xcache_technologies xcache Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName hea… NVD-CWE-Other
CVE-2001-1023 2017-12-19 11:29 2001-09-21 Show GitHub Exploit DB Packet Storm
344699 - entrust getaccess login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument. NVD-CWE-Other
CVE-2001-1024 2017-12-19 11:29 2001-07-27 Show GitHub Exploit DB Packet Storm
344700 - trend_micro interscan_applettrap Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, … NVD-CWE-Other
CVE-2001-1026 2017-12-19 11:29 2001-07-9 Show GitHub Exploit DB Packet Storm