Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3181 4.4 警告
Local
Vim Vim VimにおけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-42307 2026-05-18 12:14 2026-05-8 Show GitHub Exploit DB Packet Storm
3182 7.8 重要
Local
Python Software Foundation Python Pillow Python Software FoundationのPython Pillowにおける複数の脆弱性 CWE-190
CWE-787
CVE-2026-42311 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3183 5.5 警告
Local
M2-Team NanaZip M2-TeamのNanaZipにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御
CVE-2026-42445 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3184 7.1 重要
Local
M2-Team NanaZip M2-TeamのNanaZipにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り
CVE-2026-42446 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3185 8.5 重要
Network
n8n-MCP n8n-MCP n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-42449 2026-05-18 12:14 2026-05-7 Show GitHub Exploit DB Packet Storm
3186 7.3 重要
Network
Apache Software Foundation Apache Tomcat Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2026-42498 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
3187 9.8 緊急
Network
archivebox archivebox archiveboxにおける引数の挿入または変更に関する脆弱性 CWE-88
引数の挿入または変更
CVE-2026-42601 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3188 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42605 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3189 8.8 重要
Network
azuracast azuracast AzuraCastにおけるパスワード管理機能に関する脆弱性 CWE-640
パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み
CVE-2026-42606 2026-05-18 12:14 2026-05-9 Show GitHub Exploit DB Packet Storm
3190 9.9 緊急
Network
マイクロソフト Azure Logic Apps Azure Logic Apps の特権昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-42823 2026-05-18 12:14 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345761 - linux linux_kernel Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR … NVD-CWE-Other
CVE-2003-0619 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345762 - kde kde KDM in KDE 3.1.3 and earlier does not verify whether the pam_setcred function call succeeds, which may allow attackers to gain root privileges by triggering error conditions within PAM modules, as de… NVD-CWE-Other
CVE-2003-0690 2017-10-11 10:29 2003-10-6 Show GitHub Exploit DB Packet Storm
345763 - kde kde KDM in KDE 3.1.3 and earlier uses a weak session cookie generation algorithm that does not provide 128 bits of entropy, which allows attackers to guess session cookies via brute force methods and gai… NVD-CWE-Other
CVE-2003-0692 2017-10-11 10:29 2003-10-6 Show GitHub Exploit DB Packet Storm
345764 - redhat enterprise_linux
linux_advanced_workstation
The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a… NVD-CWE-Other
CVE-2003-0699 2017-10-11 10:29 2003-08-27 Show GitHub Exploit DB Packet Storm
345765 - redhat kernel The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation… NVD-CWE-Other
CVE-2003-0700 2017-10-11 10:29 2004-02-17 Show GitHub Exploit DB Packet Storm
345766 - sun solaris The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain… NVD-CWE-Other
CVE-2003-0722 2017-10-11 10:29 2003-09-22 Show GitHub Exploit DB Packet Storm
345767 - slocate slocate Heap-based buffer overflow in main.c of slocate 2.6, and possibly other versions, may allow local users to gain privileges via a modified slocate database that causes a negative "pathlen" value to be… NVD-CWE-Other
CVE-2003-0848 2017-10-11 10:29 2003-11-17 Show GitHub Exploit DB Packet Storm
345768 - gnu
washington_university
fileutils
wu-ftpd
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd. NVD-CWE-Other
CVE-2003-0854 2017-10-11 10:29 2003-11-17 Show GitHub Exploit DB Packet Storm
345769 - stephen_hemminger iproute iproute 2.4.7 and earlier allows local users to cause a denial of service via spoofed messages as other users to the kernel netlink interface. NVD-CWE-Other
CVE-2003-0856 2017-10-11 10:29 2003-12-15 Show GitHub Exploit DB Packet Storm
345770 - gnu
quagga
zebra
quagga_routing_software_suite
Zebra 0.93b and earlier, and quagga before 0.95, allows local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface. CWE-399
 Resource Management Errors
CVE-2003-0858 2017-10-11 10:29 2003-12-15 Show GitHub Exploit DB Packet Storm