Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6011 9.8 緊急
Network 		D-Link Systems, Inc. DIR-456U Firmware D-Link CorporationのDIR-456U Firmwareにおけるハードコードされた認証情報の使用に関する脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2026-42376 2026-05-13 10:26 2026-05-4 Show GitHub Exploit DB Packet Storm
6012 6.5 警告
Network 		langflow Langflow Desktop langflowのLangflow Desktopにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-4502 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
6013 7.5 重要
Network 		langflow Langflow Desktop langflowのLangflow Desktopにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-4503 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
6014 8.8 重要
Network 		langflow Langflow Desktop langflowのLangflow Desktopにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2026-6543 2026-05-13 10:26 2026-04-30 Show GitHub Exploit DB Packet Storm
6015 7.8 重要
Local 		ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおけるハードコードされた暗号鍵の使用に関する脆弱性 CWE-321
ハードコードされた暗号鍵の使用 		CVE-2026-6787 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
6016 7.8 重要
Local 		ウォッチガード・テクノロジー WatchGuard Agent ウォッチガード・テクノロジーのWatchGuard Agentにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2026-6788 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
6017 7.5 重要
Network 		Thales Group Ercom Cryptobox Thales GroupのErcom Cryptoboxにおける不十分なパーミッションまたは特権の不適切な処理に関する脆弱性 CWE-280
CWE-noinfo
CVE-2026-6805 2026-05-13 10:26 2026-05-7 Show GitHub Exploit DB Packet Storm
6018 6.5 警告
Network 		Apache Software Foundation CloudStack Apache Software FoundationのCloudStackにおける不正な認証に関する脆弱性 CWE-863
不正な認証 		CVE-2025-66170 2026-05-13 10:26 2026-05-8 Show GitHub Exploit DB Packet Storm
6019 7.5 重要
Network 		Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71251 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
6020 7.5 重要
Network 		Google Android GoogleのAndroidにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71252 2026-05-13 10:26 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346751 - hp
university_of_washington
sco 		dtmail
pine
unixware 		MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. NVD-CWE-Other
CVE-1999-0004 2018-10-13 06:29 1997-12-16 Show GitHub Exploit DB Packet Storm
346752 - microsoft internet_information_server
windows_nt 		In IIS, remote attackers can obtain source code for ASP files by appending "::$DATA" to the URL. NVD-CWE-Other
CVE-1999-0278 2018-10-13 06:29 1998-06-1 Show GitHub Exploit DB Packet Storm
346753 - microsoft windows_nt Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs. NVD-CWE-Other
CVE-1999-0376 2018-10-13 06:29 1999-02-20 Show GitHub Exploit DB Packet Storm
346754 - microsoft backoffice_resource_kit Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe for Scripting. NVD-CWE-Other
CVE-1999-0379 2018-10-13 06:29 1999-02-22 Show GitHub Exploit DB Packet Storm
346755 - microsoft windows_nt The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges. NVD-CWE-Other
CVE-1999-0382 2018-10-13 06:29 1999-03-12 Show GitHub Exploit DB Packet Storm
346756 - microsoft office
outlook
project
visual_basic
windows_2000
windows_nt 		The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX content. NVD-CWE-Other
CVE-1999-0384 2018-10-13 06:29 1999-01-1 Show GitHub Exploit DB Packet Storm
346757 - microsoft frontpage
personal_web_server 		Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server by using a nonstandard URL. NVD-CWE-Other
CVE-1999-0386 2018-10-13 06:29 1999-03-1 Show GitHub Exploit DB Packet Storm
346758 - microsoft windows_nt MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013. NVD-CWE-Other
CVE-1999-0489 2018-10-13 06:29 1999-05-17 Show GitHub Exploit DB Packet Storm
346759 - microsoft internet_information_server The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. NVD-CWE-Other
CVE-1999-0736 2018-10-13 06:29 1999-05-7 Show GitHub Exploit DB Packet Storm
346760 - microsoft internet_information_server The viewcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files. NVD-CWE-Other
CVE-1999-0737 2018-10-13 06:29 1999-05-7 Show GitHub Exploit DB Packet Storm