Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
1981	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月28日）	-	-	2026-06-1 14:21	2026-05-29	Show	GitHub Exploit DB Packet Storm

1982	7.8	重要 Local	エフサステクノロジーズ株式会社	ServerView Agents for Windows	ServerView Agents for Windowsにおける複数の脆弱性	CWE-Other その他	CVE-2026-27788 CVE-2026-32325	2026-06-1 12:15	2026-06-1	Show	GitHub Exploit DB Packet Storm

1983	-	-	（複数のベンダ）	（複数の製品）	CISA ICS Advisory / ICS Medical Advisory（2026年05月26日）	-	-	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1984	-	-	Casbin	Casdoor	Casdoorにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-6815	2026-05-29 15:44	2026-05-27	Show	GitHub Exploit DB Packet Storm

1985	9.8	緊急 Network	nx	Nx Console	nxのNx Consoleにおける埋め込まれた悪意のあるコードに関する脆弱性	CWE-506 埋め込まれた悪意のあるコード	CVE-2026-48027	2026-05-29 11:20	2026-05-27	Show	GitHub Exploit DB Packet Storm

1986	9.8	緊急 Network	Jenkins プロジェクト	GitBucket	GitBucketにおける重要な機能に対する認証の欠如に関する脆弱性	CWE-306 重要な機能に対する認証の欠如解説	CVE-2018-25332	2026-05-29 11:20	2026-05-17	Show	GitHub Exploit DB Packet Storm

1987	7.5	重要 Network	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)	HACS (Home Assistant Community Store)におけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2021-47942	2026-05-29 11:20	2026-05-16	Show	GitHub Exploit DB Packet Storm

1988	7.3	重要 Local	Airbus	TETRA Connectivity Server	AirbusのTETRA Connectivity Serverにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2025-7024	2026-05-29 11:20	2026-04-3	Show	GitHub Exploit DB Packet Storm

1989	7.5	重要 Network	マイクロソフト	Microsoft Global Secure Access (GSA)	Microsoft グローバルセキュアアクセス (GSA) の情報漏えいの脆弱性	CWE-269 不適切な権限管理	CVE-2026-23663	2026-05-29 11:20	2026-05-22	Show	GitHub Exploit DB Packet Storm

1990	8.8	重要 Network	マイクロソフト	Azure Privileged Identity Management (PIM)	Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-35430	2026-05-29 11:20	2026-05-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
344721	-	davide_libenzi	xmail	Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.	NVD-CWE-Other	CVE-2000-0840	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344722	-	davide_libenzi	xmail	Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long APOP command.	NVD-CWE-Other	CVE-2000-0841	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344723	-	sebastian_kienzl	muh	The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a m…	NVD-CWE-Other	CVE-2000-0857	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344724	-	borland_software	interbase_superserver	Interbase 6 SuperServer for Linux allows an attacker to cause a denial of service via a query containing 0 bytes.	NVD-CWE-Other	CVE-2000-0866	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344725	-	nathan_purciful	phpphotoalbum	explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0872	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344726	-	plus_technologies	lpplus	LPPlus programs dccsched, dcclpdser, dccbkst, dccshut, dcclpdshut, and dccbkstshut are installed setuid root and world executable, which allows arbitrary local users to start and stop various LPD ser…	NVD-CWE-Other	CVE-2000-0879	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344727	-	plus_technologies	lpplus	LPPlus creates the lpdprocess file with world-writeable permissions, which allows local users to kill arbitrary processes by specifying an alternate process ID and using the setuid dcclpdshut program…	NVD-CWE-Other	CVE-2000-0880	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344728	-	plus_technologies	lpplus	The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files.	NVD-CWE-Other	CVE-2000-0881	2017-12-19 11:29	2000-11-14	Show	GitHub Exploit DB Packet Storm

344729	-	nathan_purciful	phpphotoalbum	getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.	NVD-CWE-Other	CVE-2000-0902	2017-12-19 11:29	2000-12-19	Show	GitHub Exploit DB Packet Storm

344730	-	moreover.com	cached_feed.cgi_script	Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format paramete…	NVD-CWE-Other	CVE-2000-0906	2017-12-19 11:29	2000-12-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed