Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
5771 7.5 重要
Network 		オラクル Java VM オラクルのJava VMにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35229 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
5772 4.4 警告
Local 		オラクル Oracle Linux オラクルのOracle Linuxにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-35233 2026-05-7 10:51 2026-05-1 Show GitHub Exploit DB Packet Storm
5773 5.2 警告
Network 		オラクル Hyperion Infrastructure Technology オラクルのHyperion Infrastructure Technologyにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-35244 2026-05-7 10:51 2026-04-21 Show GitHub Exploit DB Packet Storm
5774 9.1 緊急
Network 		Volcengine OpenViking VolcengineのOpenVikingにおける安全でない失敗処理に関する脆弱性 CWE-636
安全でない失敗処理 		CVE-2026-40525 2026-05-7 10:51 2026-04-17 Show GitHub Exploit DB Packet Storm
5775 7.1 重要
Network 		Apache Software Foundation Apache Atlas Apache Software FoundationのApache Atlasにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-40563 2026-05-7 10:51 2026-05-4 Show GitHub Exploit DB Packet Storm
5776 8.8 重要
Adjacent 		Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-41429 2026-05-7 10:51 2026-04-24 Show GitHub Exploit DB Packet Storm
5777 9 緊急
Network 		Jenkins プロジェクト GitHub JenkinsのGitHubにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42523 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
5778 8 重要
Network 		Jenkins プロジェクト HTML Publisher Plugin JenkinsのHTML Publisher Pluginにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42524 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
5779 4.3 警告
Network 		Jenkins プロジェクト Azure AD JenkinsのAzure ADにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-42525 2026-05-7 10:51 2026-04-29 Show GitHub Exploit DB Packet Storm
5780 8.8 重要
Adjacent 		TP-LINK Technologies TL-WR841N ファームウェア TP-LINK TechnologiesのTL-WR841N ファームウェアにおけるデフォルトの暗号鍵の使用に関する脆弱性 CWE-1394
デフォルトの暗号鍵の使用 		CVE-2026-5039 2026-05-7 10:51 2026-04-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347171 - deltathree pc-to-phone DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, an… NVD-CWE-Other
CVE-2001-0837 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347172 - squid squid_web_proxy Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request. NVD-CWE-Other
CVE-2001-0843 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347173 - lotus domino Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). NVD-CWE-Other
CVE-2001-0846 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347174 - caldera openlinux A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a … NVD-CWE-Other
CVE-2001-0850 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347175 - caldera
linux
suse 		openlinux_server
openlinux_workstation
openlinux
openlinux_edesktop
openlinux_eserver
linux_kernel
suse_linux 		Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie. NVD-CWE-Other
CVE-2001-0851 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347176 - imp webmail Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message par… NVD-CWE-Other
CVE-2001-0857 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347177 - redhat linux 2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions. NVD-CWE-Other
CVE-2001-0859 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347178 - microsoft windows_2000
windows_xp 		Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spo… NVD-CWE-Other
CVE-2001-0860 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347179 - cisco 12000_router Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a larg… NVD-CWE-Other
CVE-2001-0861 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm
347180 - cisco 12000_router Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL. NVD-CWE-Other
CVE-2001-0862 2017-10-10 10:29 2001-12-6 Show GitHub Exploit DB Packet Storm