Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4151 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32197 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4152 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32198 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4153 7.8 重要
Local 		マイクロソフト Microsoft Office Online Server
Office Long Term Servicing Channel (LTSC)
Microsoft 365 Apps
Microsoft Office
Microsoft Excel 		Microsoft Excel のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32199 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4154 7.8 重要
Local 		マイクロソフト Microsoft 365 Apps
Office Long Term Servicing Channel (LTSC)
Microsoft PowerPoint
Microsoft Office 		Microsoft PowerPoint のリモートでコードが実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2026-32200 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4155 7.8 重要
Local 		デル Alienware Command Center デルのAlienware Command Centerにおける最小権限の違反に関する脆弱性 CWE-272
最小権限の違反 		CVE-2026-32655 2026-04-30 11:03 2026-04-27 Show GitHub Exploit DB Packet Storm
4156 2.7 低
Network 		GitHub Enterprise Server GitHubのEnterprise Serverにおけるユーザ制御の鍵による認証回避に関する脆弱性 CWE-639
ユーザ制御の鍵による認証回避 		CVE-2026-3307 2026-04-30 11:03 2026-04-21 Show GitHub Exploit DB Packet Storm
4157 5.5 警告
Local 		マイクロソフト Microsoft Dynamics 365 Microsoft Dynamics 365 の(オンプレミス) で、情報漏えいの脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-33103 2026-04-30 11:03 2026-04-14 Show GitHub Exploit DB Packet Storm
4158 10 緊急
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける動的に決定されたオブジェクト属性の不適切に制御された変更に関する脆弱性 CWE-915
動的に決定されたオブジェクト属性の不適切に制御された変更 		CVE-2026-33453 2026-04-30 11:03 2026-04-27 Show GitHub Exploit DB Packet Storm
4159 9.4 緊急
Network 		Apache Software Foundation Apache Camel Apache Software FoundationのApache Camelにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-33454 2026-04-30 11:03 2026-04-27 Show GitHub Exploit DB Packet Storm
4160 7.5 重要
Network 		Linaro OP-TEE Trusted OS LinaroのOP-TEE Trusted OSにおける整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-33662 2026-04-30 11:03 2026-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
350091 - phpwebsite phpwebsite Multiple cross-site scripting (XSS) vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via (1) the day parameter in the calendar module, (2) the fa… NVD-CWE-Other
CVE-2003-0736 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350092 - phpwebsite phpwebsite The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to obtain the full pathname of phpWebSite via an invalid year, which generates an error from localtime() in TimeZone.php of… NVD-CWE-Other
CVE-2003-0737 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350093 - phpwebsite phpwebsite The calendar module in phpWebSite 0.9.x and earlier allows remote attackers to cause a denial of service (crash) via a long year parameter. CWE-134
Use of Externally-Controlled Format String 		CVE-2003-0738 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350094 - vmware workstation VMware Workstation 4.0.1 for Linux, build 5289 and earlier, allows local users to delete arbitrary files via a symlink attack. NVD-CWE-Other
CVE-2003-0739 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350095 - stunnel stunnel Stunnel 4.00, and 3.24 and earlier, leaks a privileged file descriptor returned by listen(), which allows local users to hijack the Stunnel server. NVD-CWE-Other
CVE-2003-0740 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350096 - university_of_cambridge exim Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) before 3.36 and Exim 4 (exim4) before 4.21 may allow remote attackers to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument… NVD-CWE-Other
CVE-2003-0743 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350097 - leafnode leafnode The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchne… NVD-CWE-Other
CVE-2003-0744 2016-10-18 11:37 2003-10-20 Show GitHub Exploit DB Packet Storm
350098 - ibm db2_universal_database Buffer overflow in db2licm in IBM DB2 Universal Data Base 7.2 before Fixpak 10a allows local users to gain root privileges via a long command line argument. NVD-CWE-Other
CVE-2003-0759 2016-10-18 11:37 2003-10-6 Show GitHub Exploit DB Packet Storm
350099 - squished_mosquito escapade Cross-site scripting (XSS) vulnerability in Escapade Scripting Engine (ESP) allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter. NVD-CWE-Other
CVE-2003-0763 2016-10-18 11:37 2003-09-17 Show GitHub Exploit DB Packet Storm
350100 - squished_mosquito escapade Escapade Scripting Engine (ESP) allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE p… NVD-CWE-Other
CVE-2003-0764 2016-10-18 11:37 2003-09-17 Show GitHub Exploit DB Packet Storm