Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
131 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-34356 2026-06-10 14:28 2026-06-8 Show GitHub Exploit DB Packet Storm
132 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-41840 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
133 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける重要な情報を含むキャッシュの使用に関する脆弱性 New CWE-524
重要な情報を含むキャッシュの使用 		CVE-2026-41841 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
134 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるリソースの枯渇に関する脆弱性 New CWE-400
リソースの枯渇 		CVE-2026-41842 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
135 5.9 警告
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるパストラバーサルの脆弱性 New CWE-22
パス・トラバーサル 		CVE-2026-41843 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
136 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける整数オーバーフローの脆弱性 New CWE-190
整数オーバーフローまたはラップアラウンド 		CVE-2026-41849 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
137 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおけるアルゴリズムの複雑さに関する脆弱性 New CWE-407
アルゴリズムの複雑性 		CVE-2026-41850 2026-06-10 14:28 2026-06-9 Show GitHub Exploit DB Packet Storm
138 7.5 重要
Network 		VMware Spring Framework VMwareのSpring Frameworkにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 New CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-41851 2026-06-10 14:27 2026-06-9 Show GitHub Exploit DB Packet Storm
139 9.1 緊急
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおける誤った領域へのリソースの漏えいに関する脆弱性 New CWE-668
誤った領域へのリソースの漏えい 		CVE-2026-42535 2026-06-10 14:27 2026-06-8 Show GitHub Exploit DB Packet Storm
140 7.5 重要
Network 		Apache Software Foundation Apache HTTP Server Apache Software FoundationのApache HTTP Serverにおけるヒープベースのバッファオーバーフローの脆弱性 New CWE-122
ヒープオーバーフロー 		CVE-2026-42536 2026-06-10 14:27 2026-06-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
344811 - dave_mills ntpd The xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with diff… NVD-CWE-Other
CVE-2005-2496 2017-10-11 10:30 2005-09-3 Show GitHub Exploit DB Packet Storm
344812 - slocate slocate slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service (updatedb exit and incomplete slocate database) via a certain crafted directory str… NVD-CWE-Other
CVE-2005-2499 2017-10-11 10:30 2005-08-23 Show GitHub Exploit DB Packet Storm
344813 - cvs cvs cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack. NVD-CWE-Other
CVE-2005-2693 2017-10-11 10:30 2005-08-27 Show GitHub Exploit DB Packet Storm
344814 - mozilla firefox
mozilla_suite 		Heap-based buffer overflow in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to execute arbitrary code via an XBM image file that ends in a large number of spaces instea… NVD-CWE-Other
CVE-2005-2701 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344815 - mozilla firefox
mozilla_suite 		Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Unicode sequences with "zero-width non-joiner… NVD-CWE-Other
CVE-2005-2702 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344816 - mozilla firefox
mozilla_suite 		Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in … CWE-94
Code Injection 		CVE-2005-2703 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344817 - mozilla firefox
mozilla_suite 		Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface. NVD-CWE-Other
CVE-2005-2704 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344818 - mozilla firefox
mozilla_suite 		Integer overflow in the JavaScript engine in Firefox before 1.0.7 and Mozilla Suite before 1.7.12 might allow remote attackers to execute arbitrary code. NVD-CWE-Other
CVE-2005-2705 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344819 - mozilla firefox
mozilla_suite 		Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla. NVD-CWE-Other
CVE-2005-2706 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm
344820 - mozilla firefox
mozilla_suite 		Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spawn windows without user interface components such as the address and status bar, which could be used to conduct spoo… NVD-CWE-Other
CVE-2005-2707 2017-10-11 10:30 2005-09-24 Show GitHub Exploit DB Packet Storm