Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4311	7.5	重要 Network	Loren Segal	YARD	Loren SegalのYARDにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-41493	2026-05-14 10:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

4312	3.3	低 Network	Kimai project	kimai	Kimai projectのKimaiにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-41498	2026-05-14 10:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

4313	7.4	重要 Network	go-git project	go-git	go-git projectのgo-gitにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-41506	2026-05-14 10:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

4314	8.1	重要 Network	Andreas Kloeckner	RELATE	Andreas KloecknerのRELATEにおける複数の脆弱性	CWE-203 CWE-208	CVE-2026-41588	2026-05-14 10:19	2026-05-8	Show	GitHub Exploit DB Packet Storm

4315	8.8	重要 Network	NocoBase	NocoBase	NocoBaseにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-41640	2026-05-14 10:19	2026-05-7	Show	GitHub Exploit DB Packet Storm

4316	6.1	警告 Network	fast-xml-parser project	fast-xml-parser	Natural Intelligenceのfast-xml-parserにおけるブラインド XPath インジェクションの脆弱性	CWE-91 ブラインド XPath インジェクション	CVE-2026-41650	2026-05-14 10:18	2026-05-7	Show	GitHub Exploit DB Packet Storm

4317	4.4	警告 Local	Anthropic PBC	Claude SDK for TypeScript (anthropic-ai/sdk)	Anthropic PBCのClaude SDK for TypeScript (anthropic-ai/sdk)における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性	CWE-732 重要なリソースに対する不適切なパーミッションの割り当て	CVE-2026-41686	2026-05-14 10:18	2026-05-4	Show	GitHub Exploit DB Packet Storm

4318	8.6	重要 Network	VMware	Spring AI	VMwareのSpring AIにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-917 言語構文の表現に使用される特殊な要素の不適切な無効化	CVE-2026-41705	2026-05-14 10:18	2026-05-9	Show	GitHub Exploit DB Packet Storm

4319	7.5	重要 Network	VMware	Spring AI	VMwareのSpring AIにおける不適切なデフォルトパーミッションに関する脆弱性	CWE-276 不適切なデフォルトパーミッション	CVE-2026-41712	2026-05-14 10:18	2026-05-12	Show	GitHub Exploit DB Packet Storm

4320	8.2	重要 Network	VMware	Spring AI	VMwareのSpring AIにおけるテンプレートエンジンで使用される特殊な要素の不適切な無効化に関する脆弱性	CWE-1336 テンプレートエンジンで使用される特殊な要素の不適切な無効化	CVE-2026-41713	2026-05-14 10:18	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
346851	-	cgi-world	poll_it poll_it_pro	pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remote attackers to access sensitive or private information.	NVD-CWE-Other	CVE-2000-1070	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346852	-	netscape	iplanet_ical	The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.	NVD-CWE-Other	CVE-2000-1071	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346853	-	netscape	iplanet_ical	iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands by replacing the iplncal.sh program wit…	NVD-CWE-Other	CVE-2000-1072	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346854	-	netscape	iplanet_ical	csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creating a Trojan Horse cshttpd program in a…	NVD-CWE-Other	CVE-2000-1073	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346855	-	netscape	iplanet_ical	csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse lib…	NVD-CWE-Other	CVE-2000-1074	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346856	-	netscape sun	directory_server iplanet_certificate_management_system	Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End En…	NVD-CWE-Other	CVE-2000-1075	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346857	-	iplanet	iplanet_web_server	Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.	NVD-CWE-Other	CVE-2000-1077	2017-10-10 10:29	2000-12-11	Show	GitHub Exploit DB Packet Storm

346858	-	id_software j._p._grossman	quake proquake	Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.	NVD-CWE-Other	CVE-2000-1080	2017-10-10 10:29	2000-11-1	Show	GitHub Exploit DB Packet Storm

346859	-	immunix conectiva mandrakesoft redhat suse	immunix linux mandrake_linux suse_linux	modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.	NVD-CWE-Other	CVE-2000-1095	2017-10-10 10:29	2001-01-9	Show	GitHub Exploit DB Packet Storm

346860	-	sonicwall	soho_firewall	The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.	NVD-CWE-Other	CVE-2000-1097	2017-10-10 10:29	2001-01-9	Show	GitHub Exploit DB Packet Storm