Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3581 5.5 警告
Local
M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-42445 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3582 7.1 重要
Local
M2-Team NanaZip M2-TeamのNanaZipにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42446 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3583 8.5 重要
Network
n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42449 2026-05-18 12:14 2026-05-7 Show GitHub Exploit DB Packet Storm
3584 7.3 重要
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3585 9.8 緊急
Network
archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3586 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3587 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3588 9.9 緊急
Network
マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3589 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows テレフォニー サービスの特権昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-42825 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3590 6.5 警告
Local
マイクロソフト Azure Monitor Agent Azure Monitor エージェントの拡張機能の特権昇格の脆弱性 CWE-426
信頼性のない検索パス
CVE-2026-42830 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305671 9.8 CRITICAL
Network
adobe acrobat
reader
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors… CWE-787
 Out-of-bounds Write
CVE-2011-4372 2024-11-21 10:32 2012-01-11 Show GitHub Exploit DB Packet Storm
305672 9.8 CRITICAL
Network
adobe acrobat
reader
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified ve… CWE-787
 Out-of-bounds Write
CVE-2011-4371 2024-11-21 10:32 2012-01-11 Show GitHub Exploit DB Packet Storm
305673 9.8 CRITICAL
Network
adobe acrobat
reader
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors… CWE-787
 Out-of-bounds Write
CVE-2011-4370 2024-11-21 10:32 2012-01-11 Show GitHub Exploit DB Packet Storm
305674 - hp hp-chaisoe Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 prin… CWE-200
Information Exposure
CVE-2011-4785 2024-11-21 10:32 2012-01-10 Show GitHub Exploit DB Packet Storm
305675 - siemens automation_license_manager Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd… CWE-22
Path Traversal
CVE-2011-4532 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
305676 - siemens automation_license_manager Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_tar… CWE-20
 Improper Input Validation 
CVE-2011-4531 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
305677 - siemens automation_license_manager Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon… CWE-20
 Improper Input Validation 
CVE-2011-4530 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
305678 - siemens automation_license_manager Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-4529 2024-11-21 10:32 2012-01-9 Show GitHub Exploit DB Packet Storm
305679 - mediawiki
debian
mediawiki
debian_linux
MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by (1) leveraging the SpecialUpload::aja… CWE-276
Incorrect Default Permissions 
CVE-2011-4361 2024-11-21 10:32 2012-01-8 Show GitHub Exploit DB Packet Storm
305680 - mediawiki
debian
mediawiki
debian_linux
MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1) curid or (2) oldid parameter. CWE-200
Information Exposure
CVE-2011-4360 2024-11-21 10:32 2012-01-8 Show GitHub Exploit DB Packet Storm