Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
1931 7.8 重要
Local 		アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34702 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1932 5.5 警告
Local 		アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-34703 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1933 5.5 警告
Local 		アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2026-34704 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1934 5.5 警告
Local 		アドビシステムズ Adobe InDesign アドビのAdobe InDesignにおける境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34705 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1935 7.8 重要
Local 		アドビシステムズ Adobe InCopy アドビのAdobe InCopyにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2026-34706 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1936 7.8 重要
Local 		アドビシステムズ Adobe InCopy アドビのAdobe InCopyにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-34707 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1937 7.8 重要
Local 		アドビシステムズ Adobe InCopy アドビのAdobe InCopyにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34708 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1938 6.5 警告
Network 		Apache Software Foundation answer Apache Software Foundationのanswerにおける情報漏えいに関する脆弱性 CWE-200
情報漏えい 		CVE-2026-34905 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1939 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2012
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Wind… 		Windows ユニバーサル ディスク フォーマット ファイル システム ドライバー (UDFS) の特権昇格の脆弱性 CWE-122
CWE-197
CVE-2026-40404 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
1940 7.8 重要
Local 		マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows 11 24h2
Microsoft Windows 10 21h2
Microsoft Windows 10 1809
Microsoft Windows&… 		Windows Projected File System の特権の昇格の脆弱性 CWE-126
バッファオーバーリード 		CVE-2026-42828 2026-06-11 16:24 2026-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306611 - phpldapadmin_project phpldapadmin Cross-site scripting (XSS) vulnerability in lib/QueryRender.php in phpLDAPadmin 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query_engi… CWE-79
Cross-site Scripting 		CVE-2012-0834 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
306612 - mozilla firefox
thunderbird
seamonkey 		Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service (application crash) or possi… CWE-399
 Resource Management Errors 		CVE-2012-0452 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
306613 - php php PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing of environment variables, which makes it easier for remote attackers to conduct S… CWE-20
 Improper Input Validation  		CVE-2012-0831 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
306614 - apache portable_runtime tables/apr_hash.c in the Apache Portable Runtime (APR) library through 1.4.5 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependen… CWE-20
 Improper Input Validation  		CVE-2012-0840 2024-11-21 10:35 2012-02-11 Show GitHub Exploit DB Packet Storm
306615 - inria ocaml OCaml 3.12.1 and earlier computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consum… CWE-20
 Improper Input Validation  		CVE-2012-0839 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
306616 - realnetworks realplayer
realplayer_sp 		The ATRAC codec in RealNetworks RealPlayer 11.x and 14.x through 14.0.7, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer 12.x before 12.0.0.1703 does not properly decode samples, which allows rem… CWE-94
Code Injection 		CVE-2012-0928 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
306617 - realnetworks realplayer
realplayer_sp 		Unspecified vulnerability in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving… CWE-94
NVD-CWE-noinfo
Code Injection 		CVE-2012-0927 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
306618 - realnetworks realplayer
realplayer_sp 		The RV10 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, does not properly handle height and width values, which allows remote attackers to… CWE-94
Code Injection 		CVE-2012-0926 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
306619 - realnetworks realplayer
realplayer_sp 		Unspecified vulnerability in the RV40 codec in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via… CWE-94
NVD-CWE-noinfo
Code Injection 		CVE-2012-0925 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm
306620 - realnetworks realplayer
realplayer_sp 		RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via vectors involving a VIDOBJ_START_CODE code in … CWE-94
Code Injection 		CVE-2012-0924 2024-11-21 10:35 2012-02-9 Show GitHub Exploit DB Packet Storm