Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3671 5.3 警告
Network 		projectdiscovery Nuclei ProjectDiscovery, Inc.のNucleiにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-41645 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
3672 5.5 警告
Local 		projectdiscovery Nuclei ProjectDiscovery, Inc.のNucleiにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41646 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
3673 8.1 重要
Network 		- OpenC3のOpenC3 COSMOSにおける未検証のパスワード変更に関する脆弱性 CWE-620
未検証のパスワード変更 		CVE-2026-42084 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
3674 4.3 警告
Network 		- OpenC3のOpenC3 COSMOSにおける相対パストラバーサルの脆弱性 CWE-23
相対的パストラバーサル 		CVE-2026-42085 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
3675 4.6 警告
Network 		- OpenC3のOpenC3 COSMOSにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42086 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
3676 9.6 緊急
Network 		- OpenC3のOpenC3 COSMOSにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42087 2026-05-11 11:09 2026-05-4 Show GitHub Exploit DB Packet Storm
3677 9.8 緊急
Network 		litellm litellm LiteLLMにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-42208 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
3678 9.1 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-42216 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
3679 9.8 緊急
Network 		OpenEXR OpenEXR OpenEXRにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-42217 2026-05-11 11:09 2026-05-7 Show GitHub Exploit DB Packet Storm
3680 8.8 重要
Network 		litellm litellm LiteLLMにおける複数の脆弱性 CWE-77
CWE-78
CVE-2026-42271 2026-05-11 11:09 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345631 - hassan_consulting shopping_cart Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter. NVD-CWE-Other
CVE-2000-0921 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345632 - bytes_interactive web_shopper Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the… NVD-CWE-Other
CVE-2000-0922 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345633 - aplio aplio_phone authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter. NVD-CWE-Other
CVE-2000-0923 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345634 - armada_design master_index Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter. NVD-CWE-Other
CVE-2000-0924 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345635 - smartwin_technology cyberoffice_shopping_cart The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with world readable permissions, which allows remote attackers to obtain sensitive inf… NVD-CWE-Other
CVE-2000-0925 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345636 - smartwin_technology cyberoffice_shopping_cart SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing the "Price" hidden form variable. NVD-CWE-Other
CVE-2000-0926 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345637 - wquinn quotaadvisor WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. NVD-CWE-Other
CVE-2000-0927 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345638 - wquinn diskadvisor WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. NVD-CWE-Other
CVE-2000-0928 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345639 - david_harris pegasus_mail Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch. NVD-CWE-Other
CVE-2000-0930 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm
345640 - clearswift mailsweeper_for_smtp MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service. NVD-CWE-Other
CVE-2000-0932 2017-10-10 10:29 2000-12-19 Show GitHub Exploit DB Packet Storm