Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 7.2 重要
Network 		emlog emlog emlogにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39276 2026-06-12 14:54 2026-05-29 Show GitHub Exploit DB Packet Storm
332 8.1 重要
Network 		マイクロソフト Visual Studio Code Visual Studio Code の特権の昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2026-40376 2026-06-12 14:54 2026-06-9 Show GitHub Exploit DB Packet Storm
333 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows ユニバーサル ディスク フォーマット ファイル システム ドライバー (UDFS) の特権昇格の脆弱性 CWE-197
数値打ち切り誤差 		CVE-2026-40409 2026-06-12 14:54 2026-06-9 Show GitHub Exploit DB Packet Storm
334 7.5 重要
Network 		VMware Spring HATEOAS VMwareのSpring HATEOASにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41006 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
335 7.5 重要
Network 		VMware Spring HATEOAS VMwareのSpring HATEOASにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41007 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
336 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Microsoft Kinect の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41092 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
337 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows DNS クライアントの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-41108 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
338 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
339 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
340 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344301 - microsoft windows_2000 Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA pac… NVD-CWE-Other
CVE-2001-0659 2018-10-13 06:30 2001-09-20 Show GitHub Exploit DB Packet Storm
344302 - microsoft exchange_server Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global… NVD-CWE-Other
CVE-2001-0660 2018-10-13 06:30 2001-10-30 Show GitHub Exploit DB Packet Storm
344303 - microsoft windows_nt RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request. NVD-CWE-Other
CVE-2001-0662 2018-10-13 06:30 2001-10-30 Show GitHub Exploit DB Packet Storm
344304 - microsoft windows_2000
windows_nt 		Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets. NVD-CWE-Other
CVE-2001-0663 2018-10-13 06:30 2001-12-6 Show GitHub Exploit DB Packet Storm
344305 - microsoft ie Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or… NVD-CWE-Other
CVE-2001-0665 2018-10-13 06:30 2001-10-30 Show GitHub Exploit DB Packet Storm
344306 - microsoft excel
powerpoint 		Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data … NVD-CWE-Other
CVE-2001-0718 2018-10-13 06:30 2001-10-30 Show GitHub Exploit DB Packet Storm
344307 - microsoft windows_media_player Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file. NVD-CWE-Other
CVE-2001-0719 2018-10-13 06:30 2001-12-6 Show GitHub Exploit DB Packet Storm
344308 - apple mac_os_x Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be execute… NVD-CWE-Other
CVE-2001-0720 2018-10-13 06:30 2001-12-6 Show GitHub Exploit DB Packet Storm
344309 - microsoft windows_98
windows_98se
windows_me
windows_xp 		Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request. NVD-CWE-Other
CVE-2001-0721 2018-10-13 06:30 2001-12-6 Show GitHub Exploit DB Packet Storm
344310 - microsoft windows_98
windows_98se
windows_me
windows_xp 		Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL. NVD-CWE-Other
CVE-2001-0876 2018-10-13 06:30 2001-12-20 Show GitHub Exploit DB Packet Storm