Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3371 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 10 22h2
Microsoft Windows Server 2022
Microsoft … 		WinSock 用 Windows Ancillary Function Driver の特権の昇格の脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-41088 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3372 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Windows Netlogon のリモートでコードが実行される脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-41089 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3373 7.8 重要
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2012
Microso… 		Data Deduplication Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用 		CVE-2026-41095 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3374 9.8 緊急
Network 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 11 25h2
Microsoft Windows 11 26h1
Microsoft Windows 11 24h2
Microsoft Wind… 		Windows DNS クライアントのリモートでコードが実行される脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-41096 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3375 6.7 警告
Local 		マイクロソフト Microsoft Windows Server 2025
Microsoft Windows 10 22h2
Microsoft Windows 11 25h2
Microsoft Windows Server 2022
Microsoft … 		セキュア ブートのセキュリティ機能のバイパスの脆弱性 CWE-1329
アップデートができないコンポーネントへの依存 		CVE-2026-41097 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3376 4.4 警告
Local 		マイクロソフト Microsoft 365 Copilot Android 用の Microsoft 365 Copilot のスプーフィングの脆弱性 CWE-284
CWE-Other
CVE-2026-41100 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3377 5.5 警告
Local 		マイクロソフト Microsoft Word Microsoft Edge for Android のスプーフィングの脆弱性 CWE-284
CWE-noinfo
CVE-2026-41101 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3378 5.5 警告
Local 		マイクロソフト Microsoft PowerPoint Microsoft PowerPoint for Android のスプーフィングの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41102 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3379 7.4 重要
Network 		Outlook.com Microsoft Edge Chromium Microsoft Edge (Chromium ベース) の情報漏えいの脆弱性 CWE-610
CWE-73
CVE-2026-41107 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
3380 8.8 重要
Network 		マイクロソフト Visual Studio Code GitHub Copilot と Visual Studio Code セキュリティ機能バイパスの脆弱性 CWE-74
インジェクション 		CVE-2026-41109 2026-05-18 11:31 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345831 - phpdig.net phpdig PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference … NVD-CWE-Other
CVE-2004-0068 2017-10-10 10:30 2004-02-17 Show GitHub Exploit DB Packet Storm
345832 - visualshapers ezcontents PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server th… NVD-CWE-Other
CVE-2004-0070 2017-10-10 10:30 2004-02-17 Show GitHub Exploit DB Packet Storm
345833 - linux linux_kernel The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to caus… NVD-CWE-Other
CVE-2004-0075 2017-10-10 10:30 2004-03-15 Show GitHub Exploit DB Packet Storm
345834 - mutt mutt Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cert… NVD-CWE-Other
CVE-2004-0078 2017-10-10 10:30 2004-03-3 Show GitHub Exploit DB Packet Storm
345835 - andries_brouwer util-linux The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data. NVD-CWE-Other
CVE-2004-0080 2017-10-10 10:30 2004-03-3 Show GitHub Exploit DB Packet Storm
345836 - apple mac_os_x Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable. NVD-CWE-Other
CVE-2004-0089 2017-10-10 10:30 2004-03-3 Show GitHub Exploit DB Packet Storm
345837 - xfree86_project x11r6 XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructur… NVD-CWE-Other
CVE-2004-0093 2017-10-10 10:30 2004-03-15 Show GitHub Exploit DB Packet Storm
345838 - xfree86_project x11r6 Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DR… NVD-CWE-Other
CVE-2004-0094 2017-10-10 10:30 2004-03-15 Show GitHub Exploit DB Packet Storm
345839 - mcafee epolicy_orchestrator McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Cont… NVD-CWE-Other
CVE-2004-0095 2017-10-10 10:30 2004-02-17 Show GitHub Exploit DB Packet Storm
345840 - freebsd freebsd mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical … NVD-CWE-Other
CVE-2004-0099 2017-10-10 10:30 2004-03-3 Show GitHub Exploit DB Packet Storm