Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
4581 5.3 警告
Network
Fleet Device Management fleet Fleet Device Managementのfleetにおけるスプーフィングによる認証回避に関する脆弱性 CWE-290
スプーフィングによる認証回避
CVE-2026-24000 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4582 7.5 重要
Network
strapi strapi strapiにおける複数の脆弱性 CWE-200
CWE-22
CWE-943
CVE-2026-27886 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4583 6.5 警告
Network
Grafana Labs Grafana Grafana LabsのGrafanaにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-28376 2026-05-18 12:07 2026-05-13 Show GitHub Exploit DB Packet Storm
4584 2.7
Network
GitLab.org GitLab GitLab.orgのGitLabにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-2900 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4585 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-3073 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4586 4.3 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避
CVE-2026-3074 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4587 5.8 警告
Network
GitLab.org GitLab GitLab.orgのGitLabにおけるフィルタリングの回避に関する脆弱性 CWE-441
フィルタリング回避
CVE-2026-3160 2026-05-18 12:07 2026-05-14 Show GitHub Exploit DB Packet Storm
4588 9.1 緊急
Network
マイクロソフト Azure SDK for Java Azure SDK for Java のセキュリティ機能のバイパスの脆弱性 CWE-287
CWE-347
CVE-2026-33117 2026-05-18 12:07 2026-05-12 Show GitHub Exploit DB Packet Storm
4589 9.9 緊急
Network
マイクロソフト Microsoft Dynamics 365 Customer Insights Microsoft Dynamics 365 Customer Insights の特権昇格の脆弱性 CWE-269
不適切な権限管理
CVE-2026-33821 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
4590 6.5 警告
Adjacent
Pengutronix e.K. barebox Pengutronix e.K.のbareboxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-34960 2026-05-18 12:06 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345381 - inter7 vpopmail Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL usernam… NVD-CWE-Other
CVE-2001-0990 2017-12-19 11:29 2001-09-4 Show GitHub Exploit DB Packet Storm
345382 - scott_r._lemmon proxomitron_naoko-4 Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious scrip… NVD-CWE-Other
CVE-2001-0991 2017-12-19 11:29 2001-07-24 Show GitHub Exploit DB Packet Storm
345383 - kabotie_software_technologies shopplus_cart shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter. NVD-CWE-Other
CVE-2001-0992 2017-12-19 11:29 2001-09-5 Show GitHub Exploit DB Packet Storm
345384 - marconi forethought Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from log… NVD-CWE-Other
CVE-2001-0994 2017-12-19 11:29 2001-09-4 Show GitHub Exploit DB Packet Storm
345385 - pop3lite pop3lite POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpret… NVD-CWE-Other
CVE-2001-0996 2017-12-19 11:29 2001-09-2 Show GitHub Exploit DB Packet Storm
345386 - textor_webmasters_ltd. listrec.pl Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter. NVD-CWE-Other
CVE-2001-0997 2017-12-19 11:29 2001-09-11 Show GitHub Exploit DB Packet Storm
345387 - microsoft outlook_express Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain… NVD-CWE-Other
CVE-2001-0999 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm
345388 - merit aaa_radius_server rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file. NVD-CWE-Other
CVE-2001-1000 2017-12-19 11:29 2001-09-7 Show GitHub Exploit DB Packet Storm
345389 - suse suse_linux Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/. NVD-CWE-Other
CVE-2001-1012 2017-12-19 11:29 2001-09-5 Show GitHub Exploit DB Packet Storm
345390 - redhat linux Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, whic… NVD-CWE-Other
CVE-2001-1013 2017-12-19 11:29 2001-09-12 Show GitHub Exploit DB Packet Storm