Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 1421 | 7.5 |
重要
Network |
VMware | Spring AI | VMwareのSpring AIにおける不適切なデフォルトパーミッションに関する脆弱性 |
CWE-276
不適切なデフォルトパーミッション |
CVE-2026-41712 | 2026-05-14 10:18 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1422 | 8.2 |
重要
Network |
VMware | Spring AI | VMwareのSpring AIにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 |
CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化 |
CVE-2026-41713 | 2026-05-14 10:18 | 2026-05-12 | Show | GitHub Exploit DB Packet Storm |
| 1423 | 6.5 |
警告
Network |
LangGenius | Dify | LangGeniusのDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-41950 | 2026-05-14 10:18 | 2026-05-5 | Show | GitHub Exploit DB Packet Storm |
| 1424 | 9.6 |
緊急
Network |
Streetwriters |
Notesnook Mobile Notesnook Desktop |
StreetwritersのNotesnook Desktop等の複数製品における複数の脆弱性 |
CWE-79 CWE-94 |
CVE-2026-42090 | 2026-05-14 10:18 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 1425 | 6.5 |
警告
Network |
goshs | goshs | goshsにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2026-42091 | 2026-05-14 10:18 | 2026-05-4 | Show | GitHub Exploit DB Packet Storm |
| 1426 | 4.8 |
警告
Network |
Weblate | wlc | Weblateのwlcにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2026-42150 | 2026-05-14 10:18 | 2026-05-8 | Show | GitHub Exploit DB Packet Storm |
| 1427 | 5.9 |
警告
Network |
Teluu Ltd. | PJSIP | Teluu Ltd.のPJSIPにおける証明書検証に関する脆弱性 |
CWE-295
不正な証明書検証 |
CVE-2026-42225 | 2026-05-14 10:18 | 2026-05-7 | Show | GitHub Exploit DB Packet Storm |
| 1428 | 4.3 |
警告
Network |
Onyx | Onyx | Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-42276 | 2026-05-14 10:18 | 2026-05-8 | Show | GitHub Exploit DB Packet Storm |
| 1429 | 6.5 |
警告
Network |
Onyx | Onyx | Onyxにおけるユーザ制御の鍵による認証回避に関する脆弱性 |
CWE-639
ユーザ制御の鍵による認証回避 |
CVE-2026-42277 | 2026-05-14 10:18 | 2026-05-8 | Show | GitHub Exploit DB Packet Storm |
| 1430 | 5.5 |
警告
Local |
Python Software Foundation | Python Pillow | Python Software FoundationのPython Pillowにおける整数オーバーフローの脆弱性 |
CWE-190
整数オーバーフローまたはラップアラウンド |
CVE-2026-42308 | 2026-05-14 10:18 | 2026-05-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 346161 | - | apple |
darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server |
Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file. |
NVD-CWE-Other
|
CVE-2004-1086 | 2017-07-11 10:30 | 2004-12-2 | Show | GitHub Exploit DB Packet Storm | |
| 346162 | - | apple |
darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server |
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user. |
NVD-CWE-Other
|
CVE-2004-1087 | 2017-07-11 10:30 | 2004-12-2 | Show | GitHub Exploit DB Packet Storm | |
| 346163 | - | apple |
darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server |
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information. |
NVD-CWE-Other
|
CVE-2004-1088 | 2017-07-11 10:30 | 2004-12-2 | Show | GitHub Exploit DB Packet Storm | |
| 346164 | - | apple |
darwin_streaming_server quicktime_streaming_server mac_os_x mac_os_x_server |
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users. |
NVD-CWE-Other
|
CVE-2004-1089 | 2017-07-11 10:30 | 2004-12-2 | Show | GitHub Exploit DB Packet Storm | |
| 346165 | - |
midnight_commander debian gentoo redhat suse turbolinux |
midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation |
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header." |
NVD-CWE-Other
|
CVE-2004-1090 | 2017-07-11 10:30 | 2005-04-14 | Show | GitHub Exploit DB Packet Storm | |
| 346166 | - |
midnight_commander debian gentoo redhat suse turbolinux |
midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation |
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference. |
NVD-CWE-Other
|
CVE-2004-1091 | 2017-07-11 10:30 | 2005-04-14 | Show | GitHub Exploit DB Packet Storm | |
| 346167 | - |
midnight_commander debian gentoo redhat suse turbolinux |
midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation |
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory. |
NVD-CWE-Other
|
CVE-2004-1092 | 2017-07-11 10:30 | 2005-04-14 | Show | GitHub Exploit DB Packet Storm | |
| 346168 | - |
midnight_commander debian gentoo redhat suse turbolinux |
midnight_commander debian_linux linux enterprise_linux linux_advanced_workstation suse_linux turbolinux_server turbolinux_workstation |
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory." |
NVD-CWE-Other
|
CVE-2004-1093 | 2017-07-11 10:30 | 2005-04-14 | Show | GitHub Exploit DB Packet Storm | |
| 346169 | - |
zgv debian |
xzgv_image_viewer zgv_image_viewer debian_linux |
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in … |
NVD-CWE-Other
|
CVE-2004-1095 | 2017-07-11 10:30 | 2005-01-10 | Show | GitHub Exploit DB Packet Storm | |
| 346170 | - | cherokee | cherokee_httpd | Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (a… |
NVD-CWE-Other
|
CVE-2004-1097 | 2017-07-11 10:30 | 2005-01-10 | Show | GitHub Exploit DB Packet Storm |