Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
6261 7 重要
Local 		レッドハット
libssh		 libssh
Red Hat Hardened Images 		libssh等の複数ベンダの製品における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2025-14821 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
6262 10 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるパストラバーサルの脆弱性 CWE-29
パストラバーサル (/../filename) 		CVE-2025-15036 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
6263 9.8 緊急
Network 		lfprojects mlflow lfprojectsのmlflowにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2025-15379 2026-04-30 12:17 2026-03-30 Show GitHub Exploit DB Packet Storm
6264 7.1 重要
Network 		lfprojects mlflow lfprojectsのmlflowにおける情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2025-15381 2026-04-30 12:17 2026-03-27 Show GitHub Exploit DB Packet Storm
6265 7.5 重要
Network 		Apache Software Foundation Apache Thrift Apache Software FoundationのApache Thriftにおけるメモリ管理ルーチンの不一致に関する脆弱性 CWE-762
メモリ管理ルーチンの不一致 		CVE-2025-48431 2026-04-30 12:17 2026-04-28 Show GitHub Exploit DB Packet Storm
6266 6.5 警告
Adjacent 		ジュニパーネットワークス Junos OS Evolved ジュニパーネットワークスのJunos OS Evolvedにおける古典的バッファオーバーフローの脆弱性 CWE-120
古典的バッファオーバーフロー 		CVE-2025-59969 2026-04-30 12:17 2026-04-9 Show GitHub Exploit DB Packet Storm
6267 7.8 重要
Local 		huggingface transformers huggingfaceのtransformersにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-1839 2026-04-30 12:17 2026-04-7 Show GitHub Exploit DB Packet Storm
6268 6.1 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-20059 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
6269 4.7 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity Connectionにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-20060 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
6270 6.5 警告
Network 		シスコシステムズ Cisco Unity Connection シスコシステムズのCisco Unity ConnectionにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2026-20061 2026-04-30 12:17 2026-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
353281 - suse suse_linux The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail. NVD-CWE-Other
CVE-2005-2023 2016-12-20 11:59 2005-06-17 Show GitHub Exploit DB Packet Storm
353282 - protector_system protector_system blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27"). NVD-CWE-Other
CVE-2004-1961 2016-12-20 11:59 2004-04-23 Show GitHub Exploit DB Packet Storm
353283 - pi3 pi3web Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (c… NVD-CWE-Other
CVE-2003-1032 2016-12-20 11:59 2004-02-17 Show GitHub Exploit DB Packet Storm
353284 - padl_software migrationtools PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) mig… NVD-CWE-Other
CVE-2006-0512 2016-12-8 12:00 2006-02-2 Show GitHub Exploit DB Packet Storm
353285 - openbsd openssh OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts fu… NVD-CWE-Other
CVE-2005-2797 2016-12-8 12:00 2005-09-7 Show GitHub Exploit DB Packet Storm
353286 - carnegie_mellon_university
openpkg
conectiva
redhat
trustix
ubuntu 		cyrus_imap_server
openpkg
linux
fedora_core
secure_linux
ubuntu_linux 		The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p"… NVD-CWE-Other
CVE-2004-1013 2016-12-8 11:59 2005-01-10 Show GitHub Exploit DB Packet Storm
353287 - mantis mantis Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations. NVD-CWE-Other
CVE-2003-0499 2016-12-8 11:59 2003-08-7 Show GitHub Exploit DB Packet Storm
353288 - fdclone fdclone FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdc… NVD-CWE-Other
CVE-2003-0596 2016-12-8 11:59 2003-08-27 Show GitHub Exploit DB Packet Storm
353289 - linux linux_kernel Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages. NVD-CWE-Other
CVE-2001-1390 2016-12-8 11:59 2001-04-17 Show GitHub Exploit DB Packet Storm
353290 - linux linux_kernel The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers. NVD-CWE-Other
CVE-2001-1392 2016-12-8 11:59 2001-04-17 Show GitHub Exploit DB Packet Storm