Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1121 7.8 重要
Local 		- アップルのmacOSにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-28915 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1122 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-28920 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1123 7.5 重要
Network 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-28930 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1124 7.5 重要
Network 		アップル visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-28936 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1125 6.5 警告
Network 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-28942 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1126 7.5 重要
Network 		アップル watchOS
visionos
iOS
iPadOS 		アップルのiPadOS等の複数製品におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい 		CVE-2026-28943 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1127 4.6 警告
Physics 		- アップルのmacOSにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-28961 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1128 6.2 警告
Local 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-28977 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1129 5.5 警告
Local 		アップル visionos
watchOS
iOS
tvOS
iPadOS 		アップルのiPadOS等の複数製品における競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2026-28996 2026-05-18 12:18 2026-05-11 Show GitHub Exploit DB Packet Storm
1130 7.8 重要
Local 		Zoom Video Communications, Inc. Zoom Workplace VDI
Zoom Meeting SDK
Zoom Workplace Desktop 		Zoom Video Communications, Inc.のZoom Meeting SDK等の複数製品における例外的な状態のチェックに関する脆弱性 CWE-754
例外的な状態における不適切なチェック 		CVE-2026-30900 2026-05-18 12:18 2026-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
319071 7.2 HIGH
Network 		- - The News Flash theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.0 via deserialization of untrusted input from the newsflash_post_meta meta value. Th… - CVE-2024-7560 2024-08-8 11:15 2024-08-8 Show GitHub Exploit DB Packet Storm
319072 8.8 HIGH
Network 		- - The MultiPurpose theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.0 via deserialization of untrusted input through the 'wpeden_post_meta' post meta.… - CVE-2024-7486 2024-08-8 11:15 2024-08-8 Show GitHub Exploit DB Packet Storm
319073 8.5 HIGH
Network 		- - An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-38206 2024-08-8 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
319074 8.2 HIGH
Network 		- - An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricking a user to click on a link. CWE-79
Cross-site Scripting 		CVE-2024-38166 2024-08-8 11:15 2024-08-7 Show GitHub Exploit DB Packet Storm
319075 - - - Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors. NOTE: in a followup post, it was observed that the source code used constants that, when… NVD-CWE-Other
CVE-2004-2238 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
319076 - gnu less Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings … NVD-CWE-Other
CVE-2004-2264 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
319077 - microsoft windows_2000
windows_2003_server
windows_xp 		Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl f… NVD-CWE-Other
CVE-2004-2339 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
319078 - apache http_server Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. … NVD-CWE-Other
CVE-2004-2343 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
319079 - mozilla firefox Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a… NVD-CWE-Other
CVE-2004-2657 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm
319080 - zonelabs zonealarm Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissio… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2004-2713 2024-08-8 11:15 2004-12-31 Show GitHub Exploit DB Packet Storm