Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2551	6.5	警告 Local	マイクロソフト	Azure Monitor Agent	Azure Monitor エージェントの拡張機能の特権昇格の脆弱性	CWE-426 信頼性のない検索パス	CVE-2026-42830	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

2552	9.1	緊急 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性	CWE-250 CWE-noinfo	CVE-2026-42833	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

2553	5.4	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) の特権の昇格の脆弱性	CWE-74 インジェクション	CVE-2026-42838	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

2554	6.5	警告 Network	Outlook.com	Microsoft Edge Chromium	Microsoft Edge (Chromium ベース) for Android のスプーフィングの脆弱性	CWE-451 ユーザインターフェースにおける重要情報の誤った表示	CVE-2026-42891	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

2555	7.8	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows 11 24h2 Microsoft Windows 11 26h1 Microsoft Windows Server 2025	Windows DWM Core ライブラリの特権の昇格の脆弱性	CWE-122 CWE-190	CVE-2026-42896	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2556	9.9	緊急 Network	マイクロソフト	Microsoft Dynamics 365	Microsoft Dynamics 365 オンプレミスのリモートでコードが実行される脆弱性	CWE-94 コード・インジェクション	CVE-2026-42898	2026-05-18 12:13	2026-05-12	Show	GitHub Exploit DB Packet Storm

2557	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける二重解放に関する脆弱性	CWE-415 二重解放	CVE-2026-43097	2026-05-18 12:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

2558	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-Other その他	CVE-2026-43098	2026-05-18 12:13	2026-05-6	Show	GitHub Exploit DB Packet Storm

2559	5.5	警告 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43285	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

2560	7.8	重要 Local	Linux	Linux Kernel	LinuxのLinux Kernelにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-43290	2026-05-18 12:13	2026-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
311811	6.5	MEDIUM Network	gnu apple	groff mac_os_x	contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbi…	CWE-254 7PK - Security Features	CVE-2009-5078	2024-11-21 10:11	2011-07-1	Show	GitHub Exploit DB Packet Storm

311812	-		apple gnu	mac_os_x groff	contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.	CWE-59 Link Following	CVE-2009-5044	2024-11-21 10:11	2011-06-25	Show	GitHub Exploit DB Packet Storm

311813	-		creloaded	cre_loaded	CRE Loaded before 6.2.14 allows remote attackers to bypass authentication and gain administrator privileges via vectors related to a modified PHP_SELF variable, which is not properly handled by (1) i…	CWE-287 Improper Authentication	CVE-2009-5077	2024-11-21 10:11	2011-06-9	Show	GitHub Exploit DB Packet Storm

311814	-		creloaded	cre_loaded	CRE Loaded before 6.2.14, and possibly other versions before 6.3.x, allows remote attackers to bypass authentication and gain administrator privileges via a request with (1) login.php or (2) password…	CWE-287 Improper Authentication	CVE-2009-5076	2024-11-21 10:11	2011-06-8	Show	GitHub Exploit DB Packet Storm

311815	-		viewvc	viewvc	ViewVC before 1.1.11 allows remote attackers to bypass the cvsdb row_limit configuration setting, and consequently conduct resource-consumption attacks, via the limit parameter, as demonstrated by a …	CWE-399 Resource Management Errors	CVE-2009-5024	2024-11-21 10:11	2011-05-24	Show	GitHub Exploit DB Packet Storm

311816	-		zeacom	chat_server	Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or…	CWE-310 Cryptographic Issues	CVE-2010-0217	2024-11-21 10:11	2011-05-21	Show	GitHub Exploit DB Packet Storm

311817	-		monkeysaudio	monkey\'s_audio	Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file.	CWE-399 Resource Management Errors	CVE-2009-5075	2024-11-21 10:11	2011-05-21	Show	GitHub Exploit DB Packet Storm

311818	-		inventivetec	mediacast	authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the Us…	CWE-310 Cryptographic Issues	CVE-2010-0216	2024-11-21 10:11	2011-05-11	Show	GitHub Exploit DB Packet Storm

311819	-		libtiff	libtiff	Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2009-5022	2024-11-21 10:11	2011-05-4	Show	GitHub Exploit DB Packet Storm

311820	-		mojolicious	mojolicious	Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2009-5074	2024-11-21 10:11	2011-05-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed