Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2351 8.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Microsoft Office
Office Long Term Servicing Channel (LTSC) 		Microsoft Office クイック実行の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-40420 2026-05-21 10:52 2026-05-12 Show GitHub Exploit DB Packet Storm
2352 5.8 警告
Network 		traefik traefik traefikにおける送信データへの重要な情報の挿入に関する脆弱性 CWE-201
送信データへの重要な情報の挿入 		CVE-2026-41181 2026-05-21 10:52 2026-05-15 Show GitHub Exploit DB Packet Storm
2353 7.5 重要
Network 		DHTMLX PDF Export Module DHTMLXのPDF Export Moduleにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-41552 2026-05-21 10:52 2026-05-15 Show GitHub Exploit DB Packet Storm
2354 9.1 緊急
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-41919 2026-05-21 10:52 2026-05-19 Show GitHub Exploit DB Packet Storm
2355 9.1 緊急
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41947 2026-05-21 10:52 2026-05-18 Show GitHub Exploit DB Packet Storm
2356 9.4 緊急
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-41948 2026-05-21 10:52 2026-05-18 Show GitHub Exploit DB Packet Storm
2357 7.5 重要
Network 		LangGenius, Inc. Dify LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-41949 2026-05-21 10:51 2026-05-18 Show GitHub Exploit DB Packet Storm
2358 7.5 重要
Network 		twisted twisted twistedにおける複数の脆弱性 CWE-400
CWE-407
CVE-2026-42304 2026-05-21 10:51 2026-05-13 Show GitHub Exploit DB Packet Storm
2359 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-4273 2026-05-21 10:51 2026-05-18 Show GitHub Exploit DB Packet Storm
2360 8.8 重要
Network 		Grav CMS grav Grav CMSのgravにおける複数の脆弱性 CWE-269
CWE-434
CVE-2026-42844 2026-05-21 10:51 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344831 - mozilla firefox Firefox 1.0.6 allows attackers to cause a denial of service (crash) via a Proxy Auto-Config (PAC) script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in … NVD-CWE-Other
CVE-2005-3089 2017-10-11 10:30 2005-09-29 Show GitHub Exploit DB Packet Storm
344832 - - - The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST command before logging in. NVD-CWE-Other
CVE-2005-3296 2017-10-11 10:30 2005-10-24 Show GitHub Exploit DB Packet Storm
344833 - apache spamassassin SpamAssassin 3.0.4 allows attackers to bypass spam detection via an e-mail with a large number of recipients ("To" addresses), which triggers a bus error in Perl. NVD-CWE-Other
CVE-2005-3351 2017-10-11 10:30 2005-11-21 Show GitHub Exploit DB Packet Storm
344834 - ibm aix Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument. NVD-CWE-Other
CVE-2005-3396 2017-10-11 10:30 2005-11-1 Show GitHub Exploit DB Packet Storm
344835 - rockliffe mailsite_express Cross-site scripting (XSS) vulnerability in Rockliffe MailSite Express before 6.1.22 allows remote attackers to inject arbitrary web script or HTML via a message body. NVD-CWE-Other
CVE-2005-3428 2017-10-11 10:30 2005-11-2 Show GitHub Exploit DB Packet Storm
344836 - cisco ios Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rath… NVD-CWE-Other
CVE-2005-3481 2017-10-11 10:30 2005-11-3 Show GitHub Exploit DB Packet Storm
344837 - hp hp-ux envd daemon in HP-UX B.11.00 through B.11.11 allows local users to obtain privileges via unknown attack vectors. NVD-CWE-Other
CVE-2005-3564 2017-10-11 10:30 2005-11-16 Show GitHub Exploit DB Packet Storm
344838 - hp hp-ux Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gain unauthorized system access via unknown attack vectors. NVD-CWE-Other
CVE-2005-3565 2017-10-11 10:30 2005-11-16 Show GitHub Exploit DB Packet Storm
344839 - gnu mailman Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash). NVD-CWE-Other
CVE-2005-3573 2017-10-11 10:30 2005-11-16 Show GitHub Exploit DB Packet Storm
344840 - redhat enterprise_linux initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is executed, which allows local users with sudo permissions for /sbin/service to ga… NVD-CWE-Other
CVE-2005-3629 2017-10-11 10:30 2005-12-31 Show GitHub Exploit DB Packet Storm