Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2541 7.1 重要
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-3473 2026-05-28 14:42 2026-05-22 Show GitHub Exploit DB Packet Storm
2542 6.7 警告
Local 		デル smartfabric storage software デルのsmartfabric storage softwareにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-35070 2026-05-28 14:42 2026-05-20 Show GitHub Exploit DB Packet Storm
2543 4.3 警告
Network 		Mattermost, Inc. Mattermost Server Mattermost, Inc.のMattermost Serverにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-3636 2026-05-28 14:42 2026-05-22 Show GitHub Exploit DB Packet Storm
2544 6.5 警告
Network 		The Go Project crypto The Go Projectのcryptoにおける通信チャネルで送信中のメッセージの整合性への不適切な強制に関する脆弱性 CWE-924
通信チャネルで送信中のメッセージの整合性への不適切な強制 		CVE-2026-39827 2026-05-28 14:42 2026-05-22 Show GitHub Exploit DB Packet Storm
2545 3.3 低
Local 		Artifex Software MuPDF Artifex SoftwareのMuPDFにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化 		CVE-2026-40505 2026-05-28 14:42 2026-04-16 Show GitHub Exploit DB Packet Storm
2546 7.5 重要
Network 		NLnet Labs unbound NLnet Labsのunboundにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反 		CVE-2026-40622 2026-05-28 14:42 2026-05-20 Show GitHub Exploit DB Packet Storm
2547 4.8 警告
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41999 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2548 8.6 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-42000 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2549 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-42001 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
2550 7.5 重要
Network 		PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるシグナルハンドラの競合状態に関する脆弱性 CWE-364
シグナルハンドラの競合状態 		CVE-2026-42002 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344341 - microsoft office
office_converter_pack
powerpoint
word 		Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. NVD-CWE-Other
CVE-2000-0088 2018-10-13 06:29 2000-01-20 Show GitHub Exploit DB Packet Storm
344342 - microsoft index_server The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. NVD-CWE-Other
CVE-2000-0097 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344343 - microsoft index_server Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. NVD-CWE-Other
CVE-2000-0098 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344344 - microsoft systems_management_server The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. NVD-CWE-Other
CVE-2000-0100 2018-10-13 06:29 1999-12-29 Show GitHub Exploit DB Packet Storm
344345 - microsoft site_server Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. NVD-CWE-Other
CVE-2000-0161 2018-10-13 06:29 2000-02-18 Show GitHub Exploit DB Packet Storm
344346 - microsoft clip_art
greetings
home_publishing 		Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" v… NVD-CWE-Other
CVE-2000-0200 2018-10-13 06:29 2000-03-6 Show GitHub Exploit DB Packet Storm
344347 - microsoft data_engine
sql_server 		Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. NVD-CWE-Other
CVE-2000-0202 2018-10-13 06:29 2000-03-8 Show GitHub Exploit DB Packet Storm
344348 - microsoft windows_media_services The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Service… NVD-CWE-Other
CVE-2000-0211 2018-10-13 06:29 2000-02-23 Show GitHub Exploit DB Packet Storm
344349 - microsoft internet_information_server IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." NVD-CWE-Other
CVE-2000-0226 2018-10-13 06:29 2000-03-20 Show GitHub Exploit DB Packet Storm
344350 - microsoft windows_media_rights_manager Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" … NVD-CWE-Other
CVE-2000-0228 2018-10-13 06:29 2000-03-17 Show GitHub Exploit DB Packet Storm