Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5351 6.5 警告
Network 		appium Appium/support appiumのAppium/supportにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-30973 2026-05-11 11:02 2026-03-10 Show GitHub Exploit DB Packet Storm
5352 8.8 重要
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2022
Microsoft Windows 11 24h2
Microsoft Windows 11 25h2
Microsoft … 		リモート デスクトップ クライアントのリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32157 2026-05-11 11:02 2026-04-14 Show GitHub Exploit DB Packet Storm
5353 10 緊急
Network 		Luis Novo (lfnovo) Open Notebook Luis Novo (lfnovo)のOpen Notebookにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-33587 2026-05-11 11:02 2026-05-7 Show GitHub Exploit DB Packet Storm
5354 8.1 重要
Network 		Luis Novo (lfnovo) Open Notebook Luis Novo (lfnovo)のOpen Notebookにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-33588 2026-05-11 11:02 2026-05-7 Show GitHub Exploit DB Packet Storm
5355 6.5 警告
Network 		Luis Novo (lfnovo) Open Notebook Luis Novo (lfnovo)のOpen Notebookにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-33589 2026-05-11 11:02 2026-05-7 Show GitHub Exploit DB Packet Storm
5356 9.8 緊急
Network 		bukts.ru LLC (Nefteprodukttekhnika) BUK TS-G Gas Station Automation System bukts.ru LLC (Nefteprodukttekhnika)のBUK TS-G Gas Station Automation SystemにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-3843 2026-05-11 11:02 2026-03-10 Show GitHub Exploit DB Packet Storm
5357 6.1 警告
Network 		spin.js spin.js spin.jsにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-3884 2026-05-11 11:02 2026-03-11 Show GitHub Exploit DB Packet Storm
5358 8.3 重要
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2024-30151 2026-05-11 11:02 2026-05-6 Show GitHub Exploit DB Packet Storm
5359 5.7 警告
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2025-31957 2026-05-11 11:02 2026-05-6 Show GitHub Exploit DB Packet Storm
5360 3.5 低
Network 		HCL Technologies Limited HCL BigFix Service Management (SM) HCL Technologies LimitedのHCL BigFix Service Management (SM)におけるメタデータのよる重要な情報の公開に関する脆弱性 CWE-1230
メタデータのよる重要な情報の公開 		CVE-2025-31959 2026-05-11 11:02 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346431 - ti_kan xmcd cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2001-1119 2017-10-10 10:30 2001-08-3 Show GitHub Exploit DB Packet Storm
346432 - suse suse_linux Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file… NVD-CWE-Other
CVE-2001-1130 2017-10-10 10:30 2001-08-2 Show GitHub Exploit DB Packet Storm
346433 - gnu mailman Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt… NVD-CWE-Other
CVE-2001-1132 2017-10-10 10:30 2001-09-5 Show GitHub Exploit DB Packet Storm
346434 - openssl
ssleay 		openssl
ssleay 		The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be use… NVD-CWE-Other
CVE-2001-1141 2017-10-10 10:30 2001-07-10 Show GitHub Exploit DB Packet Storm
346435 - lee_herron allcommerce AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack. NVD-CWE-Other
CVE-2001-1146 2017-10-10 10:30 2001-07-11 Show GitHub Exploit DB Packet Storm
346436 - checkpoint firewall-1 Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP… NVD-CWE-Other
CVE-2001-1158 2017-10-10 10:30 2001-07-9 Show GitHub Exploit DB Packet Storm
346437 - microburst udirectory udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field. NVD-CWE-Other
CVE-2001-1160 2017-10-10 10:30 2001-06-18 Show GitHub Exploit DB Packet Storm
346438 - samba
hp 		samba
cifs-9000_server 		Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is use… NVD-CWE-Other
CVE-2001-1162 2017-10-10 10:30 2001-06-23 Show GitHub Exploit DB Packet Storm
346439 - elm_development_group elm Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. NVD-CWE-Other
CVE-2001-1174 2017-10-10 10:30 2002-04-1 Show GitHub Exploit DB Packet Storm
346440 - andries_brouwer util-linux vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing. NVD-CWE-Other
CVE-2001-1175 2017-10-10 10:30 2002-04-1 Show GitHub Exploit DB Packet Storm