Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3241 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-42314 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
3242 6.5 警告
Network 		pyLoad-ng project pyLoad-ng pyLoad-ng projectのpyLoad-ngにおける複数の脆弱性 CWE-22
CWE-36
CVE-2026-42315 2026-05-18 11:30 2026-05-11 Show GitHub Exploit DB Packet Storm
3243 7.5 重要
Network 		mongoosejs mongoose mongoosejsのmongooseにおけるインジェクションに関する脆弱性 CWE-74
インジェクション 		CVE-2026-42334 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3244 7.5 重要
Network 		Getarcane Arcane GetarcaneのArcaneにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如 		CVE-2026-42461 2026-05-18 11:30 2026-05-9 Show GitHub Exploit DB Packet Storm
3245 8.1 重要
Network 		FIT2CLOUD SQLBot FIT2CLOUDのSQLBotにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-42463 2026-05-18 11:30 2026-05-13 Show GitHub Exploit DB Packet Storm
3246 7.8 重要
Local 		マイクロソフト Microsoft Office マイクロソフトのMicrosoft Officeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-42831 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3247 5.5 警告
Local 		マイクロソフト Microsoft Word
Microsoft Office
Microsoft Excel 		マイクロソフトのMicrosoft Excel等の複数製品におけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-42832 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3248 7.5 重要
Network 		Espressif Systems ESP32 Arduino Espressif SystemsのESP32 Arduinoにおける認証に関する脆弱性 CWE-287
CWE-noinfo
CVE-2026-42855 2026-05-18 11:30 2026-05-12 Show GitHub Exploit DB Packet Storm
3249 6.1 警告
Network 		マイクロソフト Microsoft Exchange Server マイクロソフトのMicrosoft Exchange Serverにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-42897 2026-05-18 11:30 2026-05-14 Show GitHub Exploit DB Packet Storm
3250 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける有効期限後のメモリの解放の欠如に関する脆弱性 CWE-401
有効期限後のメモリの解放の欠如 		CVE-2026-43286 2026-05-18 11:29 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345881 - identix biologon Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentica… NVD-CWE-Other
CVE-2001-1116 2017-10-10 10:30 2001-08-2 Show GitHub Exploit DB Packet Storm
345882 - linksys befsr41 LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML sou… NVD-CWE-Other
CVE-2001-1117 2017-10-10 10:30 2001-08-10 Show GitHub Exploit DB Packet Storm
345883 - roxen roxen_webserver A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view a… NVD-CWE-Other
CVE-2001-1118 2017-10-10 10:30 2001-08-2 Show GitHub Exploit DB Packet Storm
345884 - ti_kan xmcd cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2001-1119 2017-10-10 10:30 2001-08-3 Show GitHub Exploit DB Packet Storm
345885 - suse suse_linux Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file… NVD-CWE-Other
CVE-2001-1130 2017-10-10 10:30 2001-08-2 Show GitHub Exploit DB Packet Storm
345886 - gnu mailman Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt… NVD-CWE-Other
CVE-2001-1132 2017-10-10 10:30 2001-09-5 Show GitHub Exploit DB Packet Storm
345887 - openssl
ssleay 		openssl
ssleay 		The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be use… NVD-CWE-Other
CVE-2001-1141 2017-10-10 10:30 2001-07-10 Show GitHub Exploit DB Packet Storm
345888 - lee_herron allcommerce AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack. NVD-CWE-Other
CVE-2001-1146 2017-10-10 10:30 2001-07-11 Show GitHub Exploit DB Packet Storm
345889 - checkpoint firewall-1 Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP… NVD-CWE-Other
CVE-2001-1158 2017-10-10 10:30 2001-07-9 Show GitHub Exploit DB Packet Storm
345890 - microburst udirectory udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field. NVD-CWE-Other
CVE-2001-1160 2017-10-10 10:30 2001-06-18 Show GitHub Exploit DB Packet Storm