Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1671	8.5	重要 Network	n8n-MCP	n8n-MCP	n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-42449	2026-05-18 12:14	2026-05-7	Show	GitHub Exploit DB Packet Storm

1672	7.3	重要 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-42498	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1673	9.8	緊急 Network	archivebox	archivebox	archiveboxにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-42601	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1674	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42605	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1675	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2026-42606	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1676	9.9	緊急 Network	マイクロソフト	Azure Logic Apps	Azure Logic Apps の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-42823	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1677	7	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows テレフォニーサービスの特権昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-42825	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1678	6.5	警告 Local	マイクロソフト	Azure Monitor Agent	Azure Monitor エージェントの拡張機能の特権昇格の脆弱性	CWE-426 信頼性のない検索パス	CVE-2026-42830	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1679	9.1	緊急 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性	CWE-250 CWE-noinfo	CVE-2026-42833	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1680	5.4	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) の特権の昇格の脆弱性	CWE-74 インジェクション	CVE-2026-42838	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
319181	-		-	-	Rejected reason: REJECT DO NOT USE THIS CVE ID. ConsultIDs: CVE-2024-39771. Reason: This CVE ID is a reservation duplicate of CVE-2024-39771. Notes: All CVE users should reference CVE-2024-3977…	-	CVE-2024-41718	2024-09-3 20:15	2024-09-3	Show	GitHub Exploit DB Packet Storm

319182	5.5	MEDIUM Local	-	-	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	-	CVE-2022-48936	2024-08-31 15:15	2024-08-22	Show	GitHub Exploit DB Packet Storm

319183	6.6	MEDIUM Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-25562	2024-08-31 12:40	2024-08-14	Show	GitHub Exploit DB Packet Storm

319184	3.3	LOW Local	intel	oneapi_base_toolkit distribution_for_gdb	Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.	NVD-CWE-noinfo	CVE-2024-24973	2024-08-31 12:39	2024-08-14	Show	GitHub Exploit DB Packet Storm

319185	7.8	HIGH Local	intel	oneapi_base_toolkit distribution_for_gdb	Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-276 Incorrect Default Permissions	CVE-2024-23495	2024-08-31 12:38	2024-08-14	Show	GitHub Exploit DB Packet Storm

319186	7.3	HIGH Local	intel	oneapi_base_toolkit distribution_for_gdb	Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-427 Uncontrolled Search Path Element	CVE-2024-23491	2024-08-31 12:37	2024-08-14	Show	GitHub Exploit DB Packet Storm

319187	5.4	MEDIUM Network	yzncms	yzncms	A cross-site scripting (XSS) vulnerability in the component /index/index.html of YZNCMS v1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the config…	CWE-79 Cross-site Scripting	CVE-2024-42939	2024-08-31 11:58	2024-08-21	Show	GitHub Exploit DB Packet Storm

319188	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4538	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319189	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4528	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

319190	-		-	-	Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error and is not a valid vulnerability. Notes: All references and descriptions in this candidate h…	-	CVE-2022-4412	2024-08-31 06:15	2024-08-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed