Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3181 4.4 警告
Local 		Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-42307 2026-05-18 12:14 2026-05-8 Show GitHub Exploit DB Packet Storm
3182 7.8 重要
Local 		Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-42311 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3183 5.5 警告
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-42445 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3184 7.1 重要
Local 		M2-Team NanaZip M2-TeamのNanaZipにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42446 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3185 8.5 重要
Network 		n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-42449 2026-05-18 12:14 2026-05-7 Show GitHub Exploit DB Packet Storm
3186 7.3 重要
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3187 9.8 緊急
Network 		archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更 		CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3188 8.8 重要
Network 		azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3189 8.8 重要
Network 		azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み 		CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3190 9.9 緊急
Network 		マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345461 - graphicsmagick
imagemagick
sgi
debian
gentoo
suse 		graphicsmagick
imagemagick
propack
debian_linux
linux
suse_linux 		Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers. NVD-CWE-Other
CVE-2005-0005 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345462 - university_of_cambridge exim Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, whi… NVD-CWE-Other
CVE-2005-0021 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345463 - university_of_cambridge exim Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary… NVD-CWE-Other
CVE-2005-0022 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345464 - xpdf xpdf Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers to execute arbitrary code via a PDF file with a large /Encrypt /Length keyLength … NVD-CWE-Other
CVE-2005-0064 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345465 - vim_development_group vim The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files. NVD-CWE-Other
CVE-2005-0069 2017-10-11 10:29 2005-01-13 Show GitHub Exploit DB Packet Storm
345466 - squirrelmail squirrelmail prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers. NVD-CWE-Other
CVE-2005-0075 2017-10-11 10:29 2005-01-29 Show GitHub Exploit DB Packet Storm
345467 - debian
kde
redhat 		debian_linux
kde
enterprise_linux
enterprise_linux_desktop
linux_advanced_workstation 		The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop ses… NVD-CWE-Other
CVE-2005-0078 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345468 - htdig
mandrakesoft
redhat
suse 		htdig
mandrake_linux
mandrake_linux_corporate_server
fedora_core
suse_linux 		Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized … NVD-CWE-Other
CVE-2005-0085 2017-10-11 10:29 2005-04-27 Show GitHub Exploit DB Packet Storm
345469 - redhat enterprise_linux
enterprise_linux_desktop 		Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrat… NVD-CWE-Other
CVE-2005-0086 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm
345470 - redhat enterprise_linux
enterprise_linux_desktop 		A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an "access check," which allows local users to cause a denial of service (crash). NVD-CWE-Other
CVE-2005-0090 2017-10-11 10:29 2005-05-2 Show GitHub Exploit DB Packet Storm