Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
4871 7.5 重要
Network 		- アップルのmacOSにおけるバッファエラーの脆弱性 CWE-119
バッファエラー 		CVE-2026-39870 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
4872 6.8 警告
Physics 		ZTE ZX297520V3 ファームウェア ZTEのZX297520V3 ファームウェアにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-40003 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
4873 7.8 重要
Local 		ZTE ZXCLOUD iRAI ZTEのZXCLOUD iRAIにおける制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素 		CVE-2026-40004 2026-05-15 11:01 2026-05-7 Show GitHub Exploit DB Packet Storm
4874 6.5 警告
Network 		Zulip Zulip Server ZulipのZulip Serverにおけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-40300 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4875 6.5 警告
Network 		NocoBase NocoBase NocoBaseにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-40346 2026-05-15 11:01 2026-04-18 Show GitHub Exploit DB Packet Storm
4876 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40357 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4877 8.8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-1220
アクセス制御の不十分な粒度 		CVE-2026-40365 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4878 8 重要
Network 		マイクロソフト Microsoft SharePoint Server Microsoft SharePoint Server のリモートでコードが実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション 		CVE-2026-40368 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
4879 5.5 警告
Local 		jqlang jq jqlangのjqにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-40612 2026-05-15 11:01 2026-05-11 Show GitHub Exploit DB Packet Storm
4880 7.5 重要
Network 		PHPOffice PhpSpreadsheet PHPOfficeのPhpSpreadsheetにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-40863 2026-05-15 11:01 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347231 - caldera
immunix
mandrakesoft
squid
redhat
trustix 		openlinux_server
immunix
mandrake_single_network_firewall
squid_web_proxy
mandrake_linux
mandrake_linux_corporate_server
linux
secure_linux 		Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypas… NVD-CWE-Other
CVE-2001-1030 2017-10-10 10:29 2001-07-18 Show GitHub Exploit DB Packet Storm
347232 - francisco_burzi php-nuke admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke co… NVD-CWE-Other
CVE-2001-1032 2017-10-10 10:29 2001-09-24 Show GitHub Exploit DB Packet Storm
347233 - slrn_development_team slrn Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post. NVD-CWE-Other
CVE-2001-1035 2017-10-10 10:29 2001-09-24 Show GitHub Exploit DB Packet Storm
347234 - gnu
slackware 		findutils
slackware_linux 		GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which … NVD-CWE-Other
CVE-2001-1036 2017-10-10 10:29 2001-08-31 Show GitHub Exploit DB Packet Storm
347235 - qualcomm qpopper Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username. NVD-CWE-Other
CVE-2001-1046 2017-10-10 10:29 2001-06-2 Show GitHub Exploit DB Packet Storm
347236 - adcycle adcycle AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument. NVD-CWE-Other
CVE-2001-1053 2017-10-10 10:29 2001-07-13 Show GitHub Exploit DB Packet Storm
347237 - microsoft windows_98
windows_98se 		The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as dem… NVD-CWE-Other
CVE-2001-1055 2017-10-10 10:29 2001-07-30 Show GitHub Exploit DB Packet Storm
347238 - vmware workstation VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. NVD-CWE-Other
CVE-2001-1059 2017-10-10 10:29 2001-07-30 Show GitHub Exploit DB Packet Storm
347239 - caldera unixware
openunix 		Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument. NVD-CWE-Other
CVE-2001-1063 2017-10-10 10:29 2001-08-31 Show GitHub Exploit DB Packet Storm
347240 - aol aol_server Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header. NVD-CWE-Other
CVE-2001-1067 2017-10-10 10:29 2001-08-31 Show GitHub Exploit DB Packet Storm