Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250521	5	警告	MIT Kerberos	-	MIT Kerberos の KDC におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-0283	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250522	4.3	警告	ヒューレット・パッカード	-	HPPM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0280	2012-03-27 18:42	2011-03-14	Show	GitHub Exploit DB Packet Storm

250523	2.1	注意	ヒューレット・パッカード	-	HP MFP DSS におけるデバイスにアクセスされる脆弱性	CWE-287 不適切な認証	CVE-2011-0279	2012-03-27 18:42	2011-03-2	Show	GitHub Exploit DB Packet Storm

250524	4.3	警告	ヒューレット・パッカード	-	HP Web Jetadmin におけるアクセス制限を回避される脆弱性	CWE-noinfo 情報不足	CVE-2011-0278	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

250525	6.8	警告	ヒューレット・パッカード	-	HP HPPM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0277	2012-03-27 18:42	2011-02-7	Show	GitHub Exploit DB Packet Storm

250526	10	危険	ヒューレット・パッカード	-	HP OpenView Performance Insight Server における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2011-0276	2012-03-27 18:42	2011-01-31	Show	GitHub Exploit DB Packet Storm

250527	7.1	危険	ヒューレット・パッカード	-	HP OpenView Storage Data Protector におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-0275	2012-03-27 18:42	2011-01-24	Show	GitHub Exploit DB Packet Storm

250528	3.5	注意	IBM	-	IBM Runtimes for Java Technology で使用される IBM Java のクラスファイルパーサーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0311	2012-03-27 18:42	2010-11-25	Show	GitHub Exploit DB Packet Storm

250529	6.8	警告	IBM	-	IBM WebSphere MQ におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0310	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

250530	4.3	警告	ヒューレット・パッカード	-	HP BAC および BSM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0274	2012-03-27 18:42	2011-01-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3741	5.5	MEDIUM Local	microsoft	powerpoint	Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.	CWE-284 Improper Access Control	CVE-2026-41102	2026-05-16 11:08	2026-05-13	Show	GitHub Exploit DB Packet Storm

3742	9.1	CRITICAL Network	microsoft	confluence_saml_sso jira_saml_sso	Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.	CWE-303 NVD-CWE-Other Incorrect Implementation of Authentication Algorithm	CVE-2026-41103	2026-05-16 11:07	2026-05-13	Show	GitHub Exploit DB Packet Storm

3743	5.5	MEDIUM Local	fortinet	forticlient	A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert at…	CWE-321 Use of Hard-coded Cryptographic Key	CVE-2026-44278	2026-05-16 10:59	2026-05-13	Show	GitHub Exploit DB Packet Storm

3744	5.5	MEDIUM Local	fortinet	fortitoken_mobile	A improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow atta…	CWE-926 Improper Export of Android Application Components	CVE-2026-44279	2026-05-16 10:57	2026-05-13	Show	GitHub Exploit DB Packet Storm

3745	4.4	MEDIUM Local	microsoft	365_copilot	Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.	CWE-284 NVD-CWE-Other Improper Access Control	CVE-2026-41100	2026-05-16 10:49	2026-05-13	Show	GitHub Exploit DB Packet Storm

3746	8.8	HIGH Network	microsoft	data_formulator	Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.	CWE-94 Code Injection	CVE-2026-41094	2026-05-16 10:47	2026-05-13	Show	GitHub Exploit DB Packet Storm

3747	9.0	CRITICAL Network	-	-	SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a package's plugin.json (and the equivale…	CWE-79 CWE-116 Cross-site Scripting Improper Encoding or Escaping of Output	CVE-2026-45375	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

3748	8.3	HIGH Network	-	-	python-utcp is the python implementation of UTCP. Prior to 1.1.3, the _substitute_utcp_args method in cli_communication_protocol.py inserts user-controlled tool_args values directly into shell comman…	CWE-78 OS Command	CVE-2026-45369	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

3749	7.8	HIGH Local	saitoha	libsixel	libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. From to 1.8.7-r1, signed integer overflow in sixel_encode_highcolor's allocation size calculation can lead to a heap bu…	CWE-122 CWE-190 Heap-based Buffer Overflow Integer Overflow or Wraparound	CVE-2026-44636	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

3750	5.5	MEDIUM Local	openimageio	openimageio	OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check in TGAInput::decode_…	CWE-125 Out-of-bounds Read	CVE-2026-43996	2026-05-16 10:16	2026-05-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed