Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231 5.4 警告
Network 		VMware Spring Security VMwareのSpring Securityにおけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41003 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
232 6.1 警告
Network 		QNAP Systems QuTS hero
QNAP QTS 		QNAP SystemsのQNAP QTS等の複数製品におけるクロスサイトスクリプティングの脆弱性 New CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41539 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
233 5.3 警告
Network 		VMware Spring Security VMwareのSpring Securityにおけるデジタル署名の検証に関する脆弱性 New CWE-347
デジタル署名の不適切な検証 		CVE-2026-41694 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
234 9.8 緊急
Network 		VMware spring for graphql VMwareのspring for graphqlにおける信頼できないデータのデシリアライゼーションに関する脆弱性 New CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-41699 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
235 8.1 重要
Network 		VMware spring for graphql VMwareのspring for graphqlにおける同一生成元ポリシー違反に関する脆弱性 New CWE-346
同一生成元ポリシー違反 		CVE-2026-41700 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
236 7.5 重要
Network 		VMware spring for graphql VMwareのspring for graphqlにおけるアクセス制御に関する脆弱性 New CWE-284
不適切なアクセス制御 		CVE-2026-41856 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
237 7.5 重要
Network 		tdengine tdengine tdengineにおける整数アンダーフローの脆弱性 New CWE-191
整数アンダーフロー 		CVE-2026-42542 2026-06-15 11:18 2026-06-10 Show GitHub Exploit DB Packet Storm
238 8.1 重要
Network 		マイクロソフト Microsoft Teams Android 用の Microsoft Teams の情報漏えいの脆弱性 New CWE-74
インジェクション 		CVE-2026-42835 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
239 9.8 緊急
Network 		QNAP Systems qumagie QNAP Systemsのqumagieにおけるユーザ制御の鍵による認証回避に関する脆弱性 New CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-44083 2026-06-15 11:18 2026-06-9 Show GitHub Exploit DB Packet Storm
240 7.5 重要
Network 		axios project axios axios projectのaxiosにおける情報漏えいに関する脆弱性 New CWE-200
情報漏えい 		CVE-2026-44486 2026-06-15 11:18 2026-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344341 - microsoft office
office_converter_pack
powerpoint
word 		Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. NVD-CWE-Other
CVE-2000-0088 2018-10-13 06:29 2000-01-20 Show GitHub Exploit DB Packet Storm
344342 - microsoft index_server The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. NVD-CWE-Other
CVE-2000-0097 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344343 - microsoft index_server Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. NVD-CWE-Other
CVE-2000-0098 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344344 - microsoft systems_management_server The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. NVD-CWE-Other
CVE-2000-0100 2018-10-13 06:29 1999-12-29 Show GitHub Exploit DB Packet Storm
344345 - microsoft site_server Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. NVD-CWE-Other
CVE-2000-0161 2018-10-13 06:29 2000-02-18 Show GitHub Exploit DB Packet Storm
344346 - microsoft clip_art
greetings
home_publishing 		Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" v… NVD-CWE-Other
CVE-2000-0200 2018-10-13 06:29 2000-03-6 Show GitHub Exploit DB Packet Storm
344347 - microsoft data_engine
sql_server 		Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. NVD-CWE-Other
CVE-2000-0202 2018-10-13 06:29 2000-03-8 Show GitHub Exploit DB Packet Storm
344348 - microsoft windows_media_services The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Service… NVD-CWE-Other
CVE-2000-0211 2018-10-13 06:29 2000-02-23 Show GitHub Exploit DB Packet Storm
344349 - microsoft internet_information_server IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." NVD-CWE-Other
CVE-2000-0226 2018-10-13 06:29 2000-03-20 Show GitHub Exploit DB Packet Storm
344350 - microsoft windows_media_rights_manager Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" … NVD-CWE-Other
CVE-2000-0228 2018-10-13 06:29 2000-03-17 Show GitHub Exploit DB Packet Storm