Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223251	3.5	注意	DNN	-	DotNetNuke におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3943	2014-03-14 14:39	2013-08-13	Show	GitHub Exploit DB Packet Storm

223252	7.5	危険	FreeType Project	-	FreeType の cff/cf2hints.c 内の cf2_hintmap_build 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-2240	2014-03-14 14:19	2014-03-7	Show	GitHub Exploit DB Packet Storm

223253	4.3	警告	CiviCRM Caseproof Joobi	-	複数ベンダの製品で使用される Open Flash Chart の open-flash-chart.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1636	2014-03-14 13:48	2013-06-10	Show	GitHub Exploit DB Packet Storm

223254	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2014-0502	2014-03-13 18:24	2014-02-20	Show	GitHub Exploit DB Packet Storm

223255	7.8	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0499	2014-03-13 18:23	2014-02-20	Show	GitHub Exploit DB Packet Storm

223256	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0498	2014-03-13 18:19	2014-02-20	Show	GitHub Exploit DB Packet Storm

223257	3.5	注意	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Optimizer に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0437	2014-03-13 18:18	2014-01-14	Show	GitHub Exploit DB Packet Storm

223258	10	危険	シスコシステムズ	-	Cisco Unified SIP Phone 3905 のファームウェアにおける root アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0721	2014-03-13 17:45	2014-02-19	Show	GitHub Exploit DB Packet Storm

223259	7.5	危険	Raoul Proenca	-	Gnew の users/login.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5639	2014-03-13 17:45	2013-10-2	Show	GitHub Exploit DB Packet Storm

223260	7.8	危険	シスコシステムズ	-	Cisco IPS ソフトウェアのコントロールプレーンのアクセスリストの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0719	2014-03-13 17:42	2014-02-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
1241	5.5	MEDIUM Local	nsa	ghidra	Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names…	CWE-789 Memory Allocation with Excessive Size Value	CVE-2026-52753	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1242	5.7	MEDIUM Adjacent	microsoft	windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2022 windows_server_2025	Incorrect calculation of buffer size in Windows TCP/IP allows an authorized attacker to deny service over an adjacent network.	CWE-131 Incorrect Calculation of Buffer Size	CVE-2026-42915	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1243	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP entry names during extraction. Attackers can craft malicious extensions with travers…	CWE-22 Path Traversal	CVE-2026-52752	2026-06-12 04:52	2026-06-10	Show	GitHub Exploit DB Packet Storm

1244	8.8	HIGH Network	nsa	ghidra	Ghidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection code that allows unauthenticated remote code execution. Attackers can craft a maliciou…	CWE-502 Deserialization of Untrusted Data	CVE-2026-52751	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1245	5.3	MEDIUM Network	microsoft	windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_11_23h2 windows_11_24h2 windows_11_25h2 windows_11_26h1 windows_server_2012 windows_server_2016 w…	Windows Kerberos Denial of Service Vulnerability	CWE-125 Out-of-bounds Read	CVE-2026-42914	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1246	7.8	HIGH Local	nsa	ghidra	Ghidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe metacharacters are not properly escaped. Attackers can execute arbitrary commands und…	CWE-88 Argument Injection	CVE-2026-52750	2026-06-12 04:51	2026-06-10	Show	GitHub Exploit DB Packet Storm

1247	8.8	HIGH Network	nsa	ghidra	Ghidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionDatabase that fails to escape double quotes in usernames interpolated into ALTER ROLE …	CWE-89 SQL Injection	CVE-2026-49498	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1248	3.3	LOW Local	nsa	ghidra	Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attacke…	CWE-22 Path Traversal	CVE-2026-49497	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1249	6.1	MEDIUM Local	nsa	ghidra	Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vecto…	CWE-416 Use After Free	CVE-2026-49496	2026-06-12 04:50	2026-06-10	Show	GitHub Exploit DB Packet Storm

1250	5.5	MEDIUM Local	nsa	ghidra	Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O b…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2026-49495	2026-06-12 04:49	2026-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed