Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2821	9.8	緊急 Network	レッドハット GNU Project	Red Hat OpenShift Container Platform Red Hat Hardened Images GnuTLS Red Hat Enterprise Linux	GNU Project等の複数ベンダの製品におけるNull バイト相互作用エラー (Poison Null Byte) の脆弱性	CWE-626 Null バイト相互作用エラー (Poison Null Byte)	CVE-2026-42010	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

2822	9.6	緊急 Network	langflow	langflow	langflowにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42048	2026-05-15 11:00	2026-05-12	Show	GitHub Exploit DB Packet Storm

2823	5.5	警告 Local	ImageMagick	ImageMagick	ImageMagickにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-42050	2026-05-15 11:00	2026-05-11	Show	GitHub Exploit DB Packet Storm

2824	8.1	重要 Network		-	OpenC3のOpenC3 COSMOSにおける不要な特権による実行に関する脆弱性	CWE-250 不要な特権による実行	CVE-2026-42088	2026-05-15 11:00	2026-05-4	Show	GitHub Exploit DB Packet Storm

2825	8.8	重要 Network	litellm	litellm	LiteLLMにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-42203	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

2826	9.1	緊急 Network	axios project	axios	axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性	CWE-1321 オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)	CVE-2026-42264	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

2827	5.7	警告 Network	Kimai project	kimai	Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性	CWE-1236 CSV ファイル内の数式要素の不適切な中和	CVE-2026-42267	2026-05-15 11:00	2026-05-8	Show	GitHub Exploit DB Packet Storm

2828	7.5	重要 Network	The Go Project	Go	The Go ProjectのGoにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-42499	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

2829	7.5	重要 Network	The Go Project	Go	The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性	CWE-347 デジタル署名の不適切な検証	CVE-2026-42501	2026-05-15 11:00	2026-05-7	Show	GitHub Exploit DB Packet Storm

2830	9.1	緊急 Network	Grav CMS	grav	Grav CMSのgravにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42608	2026-05-15 11:00	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
357101	-	netscape	navigator	Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a d…	NVD-CWE-Other	CVE-2004-1160	2008-09-6 05:40	2005-01-10	Show	GitHub Exploit DB Packet Storm

357102	-	gfi	mailessentials mailsecurity	A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI …	NVD-CWE-Other	CVE-2004-1312	2008-09-6 05:40	2005-01-3	Show	GitHub Exploit DB Packet Storm

357103	-	apple	quicktime mac_os_x mac_os_x_server	AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.	NVD-CWE-Other	CVE-2004-0921	2008-09-6 05:39	2005-01-27	Show	GitHub Exploit DB Packet Storm

357104	-	apple	quicktime mac_os_x mac_os_x_server	AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is…	NVD-CWE-Other	CVE-2004-0922	2008-09-6 05:39	2005-01-27	Show	GitHub Exploit DB Packet Storm

357105	-	easy_software_products apple	cups mac_os_x mac_os_x_server	NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.	NVD-CWE-Other	CVE-2004-0924	2008-09-6 05:39	2005-01-27	Show	GitHub Exploit DB Packet Storm

357106	-	easy_software_products apple	cups mac_os_x mac_os_x_server	Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.	NVD-CWE-Other	CVE-2004-0926	2008-09-6 05:39	2005-01-27	Show	GitHub Exploit DB Packet Storm

357107	-	easy_software_products apple	cups mac_os_x mac_os_x_server	ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.	NVD-CWE-Other	CVE-2004-0927	2008-09-6 05:39	2005-01-27	Show	GitHub Exploit DB Packet Storm

357108	-	-	-	The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessio…	NVD-CWE-Other	CVE-2004-0944	2008-09-6 05:39	2004-02-28	Show	GitHub Exploit DB Packet Storm

357109	-	mitel	mitel_3300_integrated_communication_platform	The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large n…	NVD-CWE-Other	CVE-2004-0945	2008-09-6 05:39	2005-02-28	Show	GitHub Exploit DB Packet Storm

357110	-	stonesoft	firewall_engine	The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.	NVD-CWE-Other	CVE-2004-0498	2008-09-6 05:38	2004-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed