Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226391	4.3	警告	ヒューレット・パッカードアドビシステムズ日立	-	Adobe Flex SDK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2461	2013-03-27 17:33	2011-11-30	Show	GitHub Exploit DB Packet Storm

226392	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2460	2013-03-27 17:32	2011-11-10	Show	GitHub Exploit DB Packet Storm

226393	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

226394	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

226395	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

226396	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2011-2456	2013-03-27 17:26	2011-11-10	Show	GitHub Exploit DB Packet Storm

226397	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2455	2013-03-27 17:25	2011-11-10	Show	GitHub Exploit DB Packet Storm

226398	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2454	2013-03-27 17:24	2011-11-10	Show	GitHub Exploit DB Packet Storm

226399	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2453	2013-03-27 17:22	2011-11-10	Show	GitHub Exploit DB Packet Storm

226400	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2452	2013-03-27 17:19	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2631	10.0	CRITICAL Network	dhtmlx	pdf_export_module	PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization. An unauthenticated attacker can inject the malicio…	CWE-78 OS Command	CVE-2026-41553	2026-05-19 03:40	2026-05-15	Show	GitHub Exploit DB Packet Storm

2632	8.7	HIGH Network	mattermost	mattermost_server	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet generation, which allows a Mattermo…	CWE-200 Information Exposure	CVE-2026-6346	2026-05-19 03:39	2026-05-18	Show	GitHub Exploit DB Packet Storm

2633	7.6	HIGH Network	mattermost	mattermost_server	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows an attacker with access to a su…	CWE-200 Information Exposure	CVE-2026-6347	2026-05-19 03:39	2026-05-18	Show	GitHub Exploit DB Packet Storm

2634	9.8	CRITICAL Network	radare	radare2	radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed b…	CWE-416 Use After Free	CVE-2026-8695	2026-05-19 03:38	2026-05-16	Show	GitHub Exploit DB Packet Storm

2635	4.3	MEDIUM Network	mattermost	mattermost_server	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify post file attachments, props, a…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2026-4053	2026-05-19 03:37	2026-05-16	Show	GitHub Exploit DB Packet Storm

2636	6.5	MEDIUM Network	mattermost	mattermost_server	Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to enact client-side DoS via an SVG fi…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2026-4054	2026-05-19 03:36	2026-05-16	Show	GitHub Exploit DB Packet Storm

2637	6.5	MEDIUM Network	open5gs	open5gs	A vulnerability has been found in Open5GS up to 2.7.7. Affected is the function ogs_sbi_client_add in the library /lib/sbi/client.c of the component NRF. The manipulation of the argument client_pool …	CWE-404 Improper Resource Shutdown or Release	CVE-2026-8731	2026-05-19 03:35	2026-05-17	Show	GitHub Exploit DB Packet Storm

2638	9.1	CRITICAL Network	openwebui	open_webui	Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is no…	CWE-287 NVD-CWE-noinfo Improper Authentication	CVE-2026-44551	2026-05-19 03:35	2026-05-16	Show	GitHub Exploit DB Packet Storm

2639	6.5	MEDIUM Network	open5gs	open5gs	A vulnerability was detected in Open5GS up to 2.7.7. This affects an unknown function in the library /lib/sbi/message.c of the component NRF. Performing a manipulation of the argument service-names/s…	CWE-404 Improper Resource Shutdown or Release	CVE-2026-8729	2026-05-19 03:35	2026-05-17	Show	GitHub Exploit DB Packet Storm

2640	6.5	MEDIUM Network	open5gs	open5gs	A security vulnerability has been detected in Open5GS up to 2.7.7. The impacted element is the function ogs_sbi_discovery_option_parse_plmn_list in the library /lib/sbi/conv.c of the component NRF. S…	CWE-404 Improper Resource Shutdown or Release	CVE-2026-8728	2026-05-19 03:35	2026-05-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed