Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
4701	5.5	警告 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおける再帰制御に関する脆弱性	CWE-674 不適切な再帰制御	CVE-2026-42445	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

4702	7.1	重要 Local	M2-Team	NanaZip	M2-TeamのNanaZipにおける境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-42446	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

4703	8.5	重要 Network	n8n-MCP	n8n-MCP	n8n-MCPにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-42449	2026-05-18 12:14	2026-05-7	Show	GitHub Exploit DB Packet Storm

4704	7.3	重要 Network	Apache Software Foundation	Apache Tomcat	Apache Software FoundationのApache Tomcatにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-42498	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

4705	9.8	緊急 Network	archivebox	archivebox	archiveboxにおける引数の挿入または変更に関する脆弱性	CWE-88 引数の挿入または変更	CVE-2026-42601	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

4706	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2026-42605	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

4707	8.8	重要 Network	azuracast	azuracast	AzuraCastにおけるパスワード管理機能に関する脆弱性	CWE-640 パスワードを忘れた場合の脆弱なパスワードリカバリの仕組み	CVE-2026-42606	2026-05-18 12:14	2026-05-9	Show	GitHub Exploit DB Packet Storm

4708	9.9	緊急 Network	マイクロソフト	Azure Logic Apps	Azure Logic Apps の特権昇格の脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-42823	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

4709	7	重要 Local	マイクロソフト	Microsoft Windows 11 25h2 Microsoft Windows Server 2016 Microsoft Windows 10 1809 Microsoft Windows 11 23h2 Microsoft Wind…	Windows テレフォニーサービスの特権昇格の脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-42825	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

4710	6.5	警告 Local	マイクロソフト	Azure Monitor Agent	Azure Monitor エージェントの拡張機能の特権昇格の脆弱性	CWE-426 信頼性のない検索パス	CVE-2026-42830	2026-05-18 12:14	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
356241	-	bandmin	bandmin	Cross-site scripting (XSS) vulnerability in index.cgi for Bandmin 1.4 allows remote attackers to insert arbitrary HTML or script via (1) the year parameter in a showmonth action, (2) the month parame…	NVD-CWE-Other	CVE-2003-0416	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

356242	-	super-m	son_hserver	Directory traversal vulnerability in Son hServer 0.2 allows remote attackers to read arbitrary files via ".\|." (modified dot-dot) sequences.	NVD-CWE-Other	CVE-2003-0417	2016-10-18 11:33	2003-06-30	Show	GitHub Exploit DB Packet Storm

356243	-	linux	linux_kernel	The Linux 2.0 kernel IP stack does not properly calculate the size of an ICMP citation, which causes it to include portions of unauthorized memory in ICMP error responses.	NVD-CWE-Other	CVE-2003-0418	2016-10-18 11:33	2003-07-24	Show	GitHub Exploit DB Packet Storm

356244	-	typespeed	typespeed	Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.	NVD-CWE-Other	CVE-2003-0435	2016-10-18 11:33	2003-07-24	Show	GitHub Exploit DB Packet Storm

356245	-	aboleo.net	portmon	Portmon 1.7 and possibly earlier versions allows local users to read and write arbitrary files via the (1) -c (host file) or (2) -l (log file) command line options.	NVD-CWE-Other	CVE-2003-0448	2016-10-18 11:33	2003-07-24	Show	GitHub Exploit DB Packet Storm

356246	-	progress	database	Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious lib…	NVD-CWE-Other	CVE-2003-0449	2016-10-18 11:33	2003-08-7	Show	GitHub Exploit DB Packet Storm

356247	-	ximian	evolution	The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integ…	NVD-CWE-Other	CVE-2003-0296	2016-10-18 11:32	2003-06-16	Show	GitHub Exploit DB Packet Storm

356248	-	mozilla	mozilla	The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large (1) literal and possibly (2) mailbox s…	NVD-CWE-Other	CVE-2003-0298	2016-10-18 11:32	2003-06-16	Show	GitHub Exploit DB Packet Storm

356249	-	mutt stuart_parmenter	mutt balsa	The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values th…	NVD-CWE-Other	CVE-2003-0299	2016-10-18 11:32	2003-06-16	Show	GitHub Exploit DB Packet Storm

356250	-	microsoft mozilla mutt qualcomm stuart_parmenter sylpheed university_of_washington ximian	outlook_express mozilla mutt eudora balsa sylpheed_email_client pine evolution	The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or inte…	NVD-CWE-Other	CVE-2003-0300	2016-10-18 11:32	2003-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed