Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
331 7.2 重要
Network 		emlog emlog emlogにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-39276 2026-06-12 14:54 2026-05-29 Show GitHub Exploit DB Packet Storm
332 8.1 重要
Network 		マイクロソフト Visual Studio Code Visual Studio Code の特権の昇格の脆弱性 CWE-20
CWE-noinfo
CVE-2026-40376 2026-06-12 14:54 2026-06-9 Show GitHub Exploit DB Packet Storm
333 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows ユニバーサル ディスク フォーマット ファイル システム ドライバー (UDFS) の特権昇格の脆弱性 CWE-197
数値打ち切り誤差 		CVE-2026-40409 2026-06-12 14:54 2026-06-9 Show GitHub Exploit DB Packet Storm
334 7.5 重要
Network 		VMware Spring HATEOAS VMwareのSpring HATEOASにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-41006 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
335 7.5 重要
Network 		VMware Spring HATEOAS VMwareのSpring HATEOASにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41007 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
336 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Microsoft Kinect の特権昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-41092 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
337 7 重要
Local 		マイクロソフト Microsoft Windows 11 23h2
Microsoft Windows Server 2022
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft&n… 		Windows DNS クライアントの特権の昇格の脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-41108 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
338 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける不十分なランダム値の使用に関する脆弱性 CWE-330
不十分なランダム値の使用 		CVE-2026-41838 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
339 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-41844 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
340 6.1 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-41845 2026-06-12 14:53 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344341 - microsoft office
office_converter_pack
powerpoint
word 		Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. NVD-CWE-Other
CVE-2000-0088 2018-10-13 06:29 2000-01-20 Show GitHub Exploit DB Packet Storm
344342 - microsoft index_server The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability. NVD-CWE-Other
CVE-2000-0097 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344343 - microsoft index_server Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist. NVD-CWE-Other
CVE-2000-0098 2018-10-13 06:29 2000-01-26 Show GitHub Exploit DB Packet Storm
344344 - microsoft systems_management_server The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program. NVD-CWE-Other
CVE-2000-0100 2018-10-13 06:29 1999-12-29 Show GitHub Exploit DB Packet Storm
344345 - microsoft site_server Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands. NVD-CWE-Other
CVE-2000-0161 2018-10-13 06:29 2000-02-18 Show GitHub Exploit DB Packet Storm
344346 - microsoft clip_art
greetings
home_publishing 		Buffer overflow in Microsoft Clip Art Gallery allows remote attackers to cause a denial of service or execute commands via a malformed CIL (clip art library) file, aka the "Clip Art Buffer Overrun" v… NVD-CWE-Other
CVE-2000-0200 2018-10-13 06:29 2000-03-6 Show GitHub Exploit DB Packet Storm
344347 - microsoft data_engine
sql_server 		Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed Select statement in an SQL query. NVD-CWE-Other
CVE-2000-0202 2018-10-13 06:29 2000-03-8 Show GitHub Exploit DB Packet Storm
344348 - microsoft windows_media_services The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Service… NVD-CWE-Other
CVE-2000-0211 2018-10-13 06:29 2000-02-23 Show GitHub Exploit DB Packet Storm
344349 - microsoft internet_information_server IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability." NVD-CWE-Other
CVE-2000-0226 2018-10-13 06:29 2000-03-20 Show GitHub Exploit DB Packet Storm
344350 - microsoft windows_media_rights_manager Microsoft Windows Media License Manager allows remote attackers to cause a denial of service by sending a malformed request that causes the manager to halt, aka the "Malformed Media License Request" … NVD-CWE-Other
CVE-2000-0228 2018-10-13 06:29 2000-03-17 Show GitHub Exploit DB Packet Storm