Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3381 7.4 重要
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおける証明書検証に関する脆弱性 CWE-295
不正な証明書検証 		CVE-2026-41132 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
3382 6.1 警告
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2026-41255 2026-05-18 11:31 2026-05-13 Show GitHub Exploit DB Packet Storm
3383 9.8 緊急
Network 		Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-41293 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3384 5 警告
Local 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-200
CWE-59
CWE-79
CWE-79
CVE-2026-41610 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3385 3.3 低
Local 		マイクロソフト Visual Studio Code Visual Studio Code のリモートでコードが実行される脆弱性 CWE-77
CWE-79
CWE-80
CVE-2026-41611 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3386 8.8 重要
Network 		マイクロソフト Visual Studio Code マイクロソフトのVisual Studio Codeにおける複数の脆弱性 CWE-384
CWE-384
CWE-78
CVE-2026-41613 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3387 7.4 重要
Network 		マイクロソフト Microsoft Authenticator Microsoft Authenticator の情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2026-41615 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3388 6.5 警告
Network 		Distribution Distribution Distributionにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2026-41888 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3389 7.5 重要
Network 		Signal K Signal K Server Signal KのSignal K Serverにおける過度な認証試行の不適切な制限に関する脆弱性 CWE-307
過度な認証試行の不適切な制限 		CVE-2026-41893 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
3390 9.8 緊急
Network 		Open Knowledge Foundation CKAN Open Knowledge FoundationのCKANにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42031 2026-05-18 11:30 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307101 - microsoft internet_explorer Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in th… CWE-426
 Untrusted Search Path 		CVE-2011-2019 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
307102 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003 		The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows loca… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2018 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
307103 - microsoft pinyin_simple_fast_style
pinyin_ime
pinyin_new_experience_style 		The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2010 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
307104 - microsoft internet_explorer The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a "trial and error" attack, aka "XSS Filter Information Disclosure … CWE-79
Cross-site Scripting 		CVE-2011-1992 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
307105 - microsoft office Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka… CWE-399
 Resource Management Errors 		CVE-2011-1983 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
307106 - widelands widelands Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname that is used f… CWE-22
Path Traversal 		CVE-2011-1932 2024-11-21 10:27 2011-12-5 Show GitHub Exploit DB Packet Storm
307107 - microsoft windows_server_2008
windows_7
windows_vista 		Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to… NVD-CWE-Other
CVE-2011-2016 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
307108 - microsoft windows_server_2008
windows_7
windows_vista 		Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by … CWE-189
Numeric Errors 		CVE-2011-2013 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
307109 - microsoft windows_server_2008
windows_7 		Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via … CWE-20
 Improper Input Validation  		CVE-2011-2004 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
307110 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista 		The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and… CWE-287
Improper Authentication 		CVE-2011-2014 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm