Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2541 7.8 重要
Local
Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-42311 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
2542 5.5 警告
Local
M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-42445 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
2543 7.1 重要
Local
M2-Team NanaZip M2-TeamのNanaZipにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42446 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
2544 8.5 重要
Network
n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42449 2026-05-18 12:14 2026-05-7 Show GitHub Exploit DB Packet Storm
2545 7.3 重要
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
2546 9.8 緊急
Network
archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
2547 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
2548 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
2549 9.9 緊急
Network
マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
2550 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows テレフォニー サービスの特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-42825 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345041 - freeradius
redhat
freeradius
enterprise_linux
fedora_core
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument. NVD-CWE-Other
CVE-2004-0960 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345042 - freeradius
redhat
freeradius
enterprise_linux
fedora_core
Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Sec… NVD-CWE-Other
CVE-2004-0961 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345043 - hp hp-ux stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment varia… NVD-CWE-Other
CVE-2004-0965 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345044 - aladdin_enterprises ghostscript The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to o… CWE-59
Link Following
CVE-2004-0967 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345045 - gnu
redhat
glibc
enterprise_linux
enterprise_linux_desktop
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0968 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345046 - lvm
gentoo
logical_volume_management_utilities
linux
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary f… NVD-CWE-Other
CVE-2004-0972 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345047 - mandrakesoft
openssl
gentoo
mandrake_multi_network_firewall
openssl
linux
mandrake_linux
mandrake_linux_corporate_server
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0975 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345048 - larry_wall perl Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2004-0976 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345049 - imagemagick
debian
gentoo
suse
imagemagick
debian_linux
linux
suse_linux
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file. NVD-CWE-Other
CVE-2004-0981 2017-10-11 10:29 2005-02-9 Show GitHub Exploit DB Packet Storm
345050 - gd_graphics_library
openpkg
gentoo
suse
trustix
gdlib
openpkg
linux
suse_linux
secure_linux
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image file… NVD-CWE-Other
CVE-2004-0990 2017-10-11 10:29 2005-03-1 Show GitHub Exploit DB Packet Storm