Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2821 9.6 緊急
Network
langflow langflow langflowにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42048 2026-05-15 11:00 2026-05-12 Show GitHub Exploit DB Packet Storm
2822 5.5 警告
Local
ImageMagick ImageMagick ImageMagickにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー
CVE-2026-42050 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
2823 8.1 重要
Network
- OpenC3のOpenC3 COSMOSにおける不要な特権による実行に関する脆弱性 CWE-250
不要な特権による実行
CVE-2026-42088 2026-05-15 11:00 2026-05-4 Show GitHub Exploit DB Packet Storm
2824 8.8 重要
Network
litellm litellm LiteLLMにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-1336
テンプレートエンジンで使用される特殊な要素の不適切な無効化
CVE-2026-42203 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
2825 9.1 緊急
Network
axios project axios axios projectのaxiosにおけるオブジェクトプロトタイプ属性の不適切に制御された変更に関する脆弱性 CWE-1321
オブジェクトプロトタイプ属性の不適切に制御された変更 (プロトタイプの汚染)
CVE-2026-42264 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
2826 5.7 警告
Network
Kimai project kimai Kimai projectのKimaiにおけるCSV ファイル内の数式要素の中和に関する脆弱性 CWE-1236
CSV ファイル内の数式要素の不適切な中和
CVE-2026-42267 2026-05-15 11:00 2026-05-8 Show GitHub Exploit DB Packet Storm
2827 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおける不特定の脆弱性 CWE-noinfo
情報不足
CVE-2026-42499 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
2828 7.5 重要
Network
The Go Project Go The Go ProjectのGoにおけるデジタル署名の検証に関する脆弱性 CWE-347
デジタル署名の不適切な検証
CVE-2026-42501 2026-05-15 11:00 2026-05-7 Show GitHub Exploit DB Packet Storm
2829 9.1 緊急
Network
Grav CMS grav Grav CMSのgravにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42608 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
2830 5.4 警告
Network
Open edX openedx Open edXのopenedxにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2026-42857 2026-05-15 11:00 2026-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345701 - atmel
linksys
netgear
firmware
wap11
me102
Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which cau… NVD-CWE-Other
CVE-2001-0888 2017-10-10 10:29 2001-12-21 Show GitHub Exploit DB Packet Storm
345702 - university_of_cambridge
redhat
exim
linux
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary co… NVD-CWE-Other
CVE-2001-0889 2017-10-10 10:29 2001-12-19 Show GitHub Exploit DB Packet Storm
345703 - sgi
cray
nqsdaemon
unicos
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains … NVD-CWE-Other
CVE-2001-0891 2017-10-10 10:29 2002-01-31 Show GitHub Exploit DB Packet Storm
345704 - wietse_venema postfix Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of servic… NVD-CWE-Other
CVE-2001-0894 2017-10-10 10:29 2001-11-11 Show GitHub Exploit DB Packet Storm
345705 - cisco catalyst_2900xl
catalyst_2948g-l3
catalyst_2950
catalyst_3500xl
catalyst_3550
catalyst_4000
catalyst_4908g-l3
catalyst_5000
catalyst_6000
catalyst_8500
distributed_direc…
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC ad… NVD-CWE-Other
CVE-2001-0895 2017-10-10 10:29 2001-11-15 Show GitHub Exploit DB Packet Storm
345706 - sco openserver Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO. NVD-CWE-Other
CVE-2001-0896 2017-10-10 10:29 2001-11-30 Show GitHub Exploit DB Packet Storm
345707 - francisco_burzi gallery Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter. NVD-CWE-Other
CVE-2001-0900 2017-10-10 10:29 2001-11-18 Show GitHub Exploit DB Packet Storm
345708 - procmail procmail Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handlin… NVD-CWE-Other
CVE-2001-0905 2017-10-10 10:29 2001-10-18 Show GitHub Exploit DB Packet Storm
345709 - tetex tetex teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr. NVD-CWE-Other
CVE-2001-0906 2017-10-10 10:29 2001-06-22 Show GitHub Exploit DB Packet Storm
345710 - microsoft windows_xp Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL. NVD-CWE-Other
CVE-2001-0909 2017-10-10 10:29 2001-11-21 Show GitHub Exploit DB Packet Storm