Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1151 4.9 警告
Network 		Extreme Networks, Inc. ExtremeCloud IQ Site Engine Extreme Networks, Inc.のExtremeCloud IQ Site Engineにおける認証情報の不十分な保護に関する脆弱性 CWE-522
認証情報の不十分な保護 		CVE-2026-0689 2026-06-8 12:28 2026-03-2 Show GitHub Exploit DB Packet Storm
1152 9.8 緊急
Network 		Tesseract OCR project Tesseract OCR ZapolnochのTesseract OCRにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2026-26832 2026-06-8 12:28 2026-03-25 Show GitHub Exploit DB Packet Storm
1153 9.1 緊急
Network 		Bytedance Inc. DeerFlow Bytedance Inc.のDeerFlowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-40518 2026-06-8 12:28 2026-04-17 Show GitHub Exploit DB Packet Storm
1154 5.3 警告
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41207 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1155 9.8 緊急
Network 		DragonSoft Gcb/fcb Government Financial Cybersecurity Configuration Audit Software DragonSoftのGcb/fcb Government Financial Cybersecurity Configuration Audit Softwareにおける重要な機能に対する認証の欠如に関する脆弱性 CWE-306
重要な機能に対する認証の欠如 解説 		CVE-2026-4312 2026-06-8 12:28 2026-03-17 Show GitHub Exploit DB Packet Storm
1156 5.5 警告
Local 		Linaro OP-TEE Trusted FirmwareのOP-TEEにおける型の取り違えに関する脆弱性 CWE-843
型の取り違え 		CVE-2026-45702 2026-06-8 12:28 2026-06-3 Show GitHub Exploit DB Packet Storm
1157 9.1 緊急
Network 		The Netty project netty-incubator-codec-ohttp Nettyのnetty-incubator-codec-ohttpにおける複数の脆弱性 CWE-125
CWE-787
CVE-2026-48040 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1158 9.8 緊急
Network 		マイクロソフト Azure HorizonDB Azure HorizonDB Elevation of Privilege Vulnerability CWE-290
スプーフィングによる認証回避 		CVE-2026-48567 2026-06-8 12:28 2026-06-4 Show GitHub Exploit DB Packet Storm
1159 7.5 重要
Network 		マイクロソフト Microsoft Exchange Online Microsoft Exchange Online Information Disclosure Vulnerability CWE-285
不適切な認可 		CVE-2026-48579 2026-06-8 12:27 2026-06-4 Show GitHub Exploit DB Packet Storm
1160 9.1 緊急
Network 		CHORNY Apache::Session::Generate::ModUniqueId CHORNYのApache::Session::Generate::ModUniqueIdにおける予測可能な数字や識別子の生成に関する脆弱性 CWE-340
予測可能な数字や識別子の生成 		CVE-2026-5081 2026-06-8 12:27 2026-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345131 - nfs nfs-utils rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different fro… NVD-CWE-Other
CVE-2004-0154 2017-10-11 10:29 2004-06-14 Show GitHub Exploit DB Packet Storm
345132 - kame racoon The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish… NVD-CWE-Other
CVE-2004-0155 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
345133 - kame racoon KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp… NVD-CWE-Other
CVE-2004-0164 2017-10-11 10:29 2004-03-3 Show GitHub Exploit DB Packet Storm
345134 - openbsd openssh Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992. CWE-22
Path Traversal 		CVE-2004-0175 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
345135 - linux linux_kernel The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by r… NVD-CWE-Other
CVE-2004-0181 2017-10-11 10:29 2004-06-1 Show GitHub Exploit DB Packet Storm
345136 - sgi
utempter
slackware 		propack
utempter
slackware_linux 		Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an… NVD-CWE-Other
CVE-2004-0233 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
345137 - clearswift
f-secure
rarlab
redhat
sgi
stalker
tsugio_okamoto
winzip 		mailsweeper
f-secure_anti-virus
f-secure_for_firewalls
f-secure_internet_security
f-secure_personal_express
internet_gatekeeper
winrar
lha
propack
cgpmcafee
winzip
fe… 		Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2004-0234 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
345138 - clearswift
f-secure
rarlab
redhat
sgi
stalker
tsugio_okamoto
winzip 		mailsweeper
f-secure_anti-virus
f-secure_for_firewalls
f-secure_internet_security
f-secure_personal_express
internet_gatekeeper
winrar
lha
propack
cgpmcafee
winzip
fe… 		Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute … NVD-CWE-Other
CVE-2004-0235 2017-10-11 10:29 2004-08-18 Show GitHub Exploit DB Packet Storm
345139 - cisco ios Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2… CWE-20
 Improper Input Validation  		CVE-2004-0244 2017-10-11 10:29 2004-11-23 Show GitHub Exploit DB Packet Storm
345140 - open_group
xi_graphics
ibm 		cde_common_desktop_environment
dextop
aix 		Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2004-0368 2017-10-11 10:29 2004-05-4 Show GitHub Exploit DB Packet Storm