Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4951 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおける解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-7363 2026-05-1 10:40 2026-04-28 Show GitHub Exploit DB Packet Storm
4952 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2025-59031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4953 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-0394 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4954 8.2 重要
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-24031 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4955 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるCapture-replay による認証回避に関する脆弱性 CWE-294
Capture-replayによる認証回避 		CVE-2026-27855 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4956 5.9 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品における認証に関する脆弱性 CWE-287
CWE-Other
CVE-2026-27856 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4957 5.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるLDAP インジェクションの脆弱性 CWE-90
LDAP インジェクション 		CVE-2026-27860 2026-05-1 10:39 2026-03-27 Show GitHub Exploit DB Packet Storm
4958 8.4 重要
Local 		Anthropic PBC Claude Code
Claude Agent SDK 		Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35020 2026-05-1 10:39 2026-04-6 Show GitHub Exploit DB Packet Storm
4959 7.8 重要
Local 		Anthropic PBC Claude Code
Claude Agent SDK 		Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35021 2026-05-1 10:39 2026-04-6 Show GitHub Exploit DB Packet Storm
4960 9.8 緊急
Network 		Anthropic PBC Claude Code
Claude Agent SDK 		Anthropic PBCのClaude Agent SDK等の複数製品におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-35022 2026-05-1 10:39 2026-04-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347041 - lanifex outreach_project_tool Multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field. CWE-79
Cross-site Scripting 		CVE-2003-1353 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347042 - gamespy3d gamespy_3d Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed U… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2003-1354 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347043 - electronic_arts battlefield_1942 Buffer overflow in the remote console (rcon) in Battlefield 1942 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2003-1355 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347044 - replicom proxyview ProxyView has a default administrator password of Administrator for Embedded Windows NT, which allows remote attackers to gain access. CWE-16
Configuration 		CVE-2003-1357 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347045 - hp hp-ux rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised privileges, which allows local users to gain privileges by mo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2003-1358 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347046 - hp hp-ux Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2003-1360 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347047 - veritas bare_metal_restore Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attackers to gain root privileges on the BMR Main Server. NVD-CWE-noinfo
CVE-2003-1361 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347048 - hp bastille Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of s… CWE-16
Configuration 		CVE-2003-1362 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347049 - aprelium_technologies abyss_web_server Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (crash) via an HTTP GET message with empty (1) Connection … CWE-20
 Improper Input Validation  		CVE-2003-1364 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm
347050 - perl cgi_lite The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\" (backslash), (2) "?", (3) "~" (tilde), (4) "^" (carat), (5) newline, or… CWE-20
 Improper Input Validation  		CVE-2003-1365 2017-07-29 10:29 2003-12-31 Show GitHub Exploit DB Packet Storm