Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2351	7.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-40419	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2352	8.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-40420	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

2353	5.8	警告 Network	traefik	traefik	traefikにおける送信データへの重要な情報の挿入に関する脆弱性	CWE-201 送信データへの重要な情報の挿入	CVE-2026-41181	2026-05-21 10:52	2026-05-15	Show	GitHub Exploit DB Packet Storm

2354	7.5	重要 Network	DHTMLX	PDF Export Module	DHTMLXのPDF Export Moduleにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41552	2026-05-21 10:52	2026-05-15	Show	GitHub Exploit DB Packet Storm

2355	9.1	緊急 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるLDAP インジェクションの脆弱性	CWE-90 LDAP インジェクション	CVE-2026-41919	2026-05-21 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

2356	9.1	緊急 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41947	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

2357	9.4	緊急 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおける相対パストラバーサルの脆弱性	CWE-23 相対的パストラバーサル	CVE-2026-41948	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

2358	7.5	重要 Network	LangGenius, Inc.	Dify	LangGenius, Inc.のDifyにおけるユーザ制御の鍵による認証回避に関する脆弱性	CWE-639 ユーザ制御の鍵による認証回避	CVE-2026-41949	2026-05-21 10:51	2026-05-18	Show	GitHub Exploit DB Packet Storm

2359	7.5	重要 Network	twisted	twisted	twistedにおける複数の脆弱性	CWE-400 CWE-407	CVE-2026-42304	2026-05-21 10:51	2026-05-13	Show	GitHub Exploit DB Packet Storm

2360	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける不正な認証に関する脆弱性	CWE-863 不正な認証	CVE-2026-4273	2026-05-21 10:51	2026-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
345341	-	slocate	slocate	Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be…	NVD-CWE-Other	CVE-2003-0848	2017-10-11 10:29	2003-11-17	Show	GitHub Exploit DB Packet Storm

345342	-	gnu washington_university	fileutils wu-ftpd	ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.	NVD-CWE-Other	CVE-2003-0854	2017-10-11 10:29	2003-11-17	Show	GitHub Exploit DB Packet Storm

345343	-	stephen_hemminger	iproute	iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface.	NVD-CWE-Other	CVE-2003-0856	2017-10-11 10:29	2003-12-15	Show	GitHub Exploit DB Packet Storm

345344	-	gnu quagga	zebra quagga_routing_software_suite	Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.	CWE-399 Resource Management Errors	CVE-2003-0858	2017-10-11 10:29	2003-12-15	Show	GitHub Exploit DB Packet Storm

345345	-	gnu quagga sgi redhat intel	glibc zebra quagga_routing_software_suite propack enterprise_linux linux_advanced_workstation ia64	The getifaddrs function in GNU libc (glibc) 2.2.4 and earlier allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface.	NVD-CWE-Other	CVE-2003-0859	2017-10-11 10:29	2003-12-15	Show	GitHub Exploit DB Packet Storm

345346	-	net-snmp	net-snmp	Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.	NVD-CWE-Other	CVE-2003-0935	2017-10-11 10:29	2003-12-1	Show	GitHub Exploit DB Packet Storm

345347	-	hp	hp-ux	Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges.	NVD-CWE-Other	CVE-2003-0951	2017-10-11 10:29	2003-12-15	Show	GitHub Exploit DB Packet Storm

345348	-	alexander_v._lukyanov	lftp	Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls …	NVD-CWE-Other	CVE-2003-0963	2017-10-11 10:29	2004-01-5	Show	GitHub Exploit DB Packet Storm

345349	-	gnu	mailman	Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities.	NVD-CWE-Other	CVE-2003-0965	2017-10-11 10:29	2004-02-17	Show	GitHub Exploit DB Packet Storm

345350	-	freeradius	freeradius	rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 leng…	NVD-CWE-Other	CVE-2003-0967	2017-10-11 10:29	2003-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed