Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1671	8.5	重要 Network	n8n-MCP	n8n-MCP	n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-42449	2026-05-18 12:14	2026-05-7	Show	GitHub Exploit DB Packet Storm

1672	7.3	重要 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-42498	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1673	9.8	緊急 Network	archivebox	archivebox	archiveboxにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-42601	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1674	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42605	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1675	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2026-42606	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

1676	9.9	緊急 Network	マイクロソフト	Azure Logic Apps	Azure Logic Apps の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-42823	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1677	7	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows テレフォニーサービスの特権昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-42825	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1678	6.5	警告 Local	マイクロソフト	Azure Monitor Agent	Azure Monitor エージェントの拡張機能の特権昇格の脆弱性	CWE-426 信頼性のない検索パス	CVE-2026-42830	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1679	9.1	緊急 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性	CWE-250 CWE-noinfo	CVE-2026-42833	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

1680	5.4	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) の特権の昇格の脆弱性	CWE-74 インジェクション	CVE-2026-42838	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355581	-	kaf_oseo	quick_and_dirty_phpsource_printer	Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attackers to read arbitrary files via ".../...//" sequences in the file parameter, whi…	NVD-CWE-Other	CVE-2005-2169	2008-09-6 05:51	2005-07-6	Show	GitHub Exploit DB Packet Storm

355582	-	mozilla	bugzilla	The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to…	NVD-CWE-Other	CVE-2005-2173	2008-09-6 05:51	2005-07-8	Show	GitHub Exploit DB Packet Storm

355583	-	mozilla	bugzilla	Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access info…	NVD-CWE-Other	CVE-2005-2174	2008-09-6 05:51	2005-07-8	Show	GitHub Exploit DB Packet Storm

355584	-	ibm	lotus_notes	The web interface for Lotus Notes mail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based att…	NVD-CWE-Other	CVE-2005-2175	2008-09-6 05:51	2005-07-9	Show	GitHub Exploit DB Packet Storm

355585	-	apple	airport_card	The Apple AirPort card uses a default WEP key when not connected to a known or trusted network, which can cause it to automatically connect to a malicious network.	NVD-CWE-Other	CVE-2005-2196	2008-09-6 05:51	2005-07-19	Show	GitHub Exploit DB Packet Storm

355586	-	spid	spid	PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.	NVD-CWE-Other	CVE-2005-2198	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

355587	-	skrypty	ppa_gallery	PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.	NVD-CWE-Other	CVE-2005-2199	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

355588	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.	NVD-CWE-Other	CVE-2005-2200	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

355589	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or acc…	NVD-CWE-Other	CVE-2005-2201	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

355590	-	xerox	workcentre_2128 workcentre_2636 workcentre_3545	Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to injec…	NVD-CWE-Other	CVE-2005-2202	2008-09-6 05:51	2005-07-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed