Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227931 10 危険 マイクロソフト
アドビシステムズ
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-4164 2012-12-26 13:55 2012-08-21 Show GitHub Exploit DB Packet Storm
227932 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5250 2012-12-26 13:54 2012-10-8 Show GitHub Exploit DB Packet Storm
227933 10 危険 マイクロソフト
アドビシステムズ
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-4163 2012-12-26 13:54 2012-08-21 Show GitHub Exploit DB Packet Storm
227934 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-5249 2012-12-26 13:53 2012-10-8 Show GitHub Exploit DB Packet Storm
227935 9.3 危険 マイクロソフト
アドビシステムズ
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-1535 2012-12-26 13:52 2012-08-14 Show GitHub Exploit DB Packet Storm
227936 5.8 警告 マイクロソフト - Microsoft Windows Server 2008 R2 および Windows Server 2012 におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2012-2549 2012-12-26 13:48 2012-12-11 Show GitHub Exploit DB Packet Storm
227937 4.3 警告 Haxx
サイバートラスト株式会社
VMware
レッドハット
- libcurl の Curl_input_negotiate 関数におけるクライアントになりすまされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-2192 2012-12-26 12:14 2011-06-23 Show GitHub Exploit DB Packet Storm
227938 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の include/asm-x86/futex.h におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3086 2012-12-26 12:04 2010-11-9 Show GitHub Exploit DB Packet Storm
227939 2.1 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の xfs_ioc_fsgetxattr 関数における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2010-3078 2012-12-26 12:03 2010-09-21 Show GitHub Exploit DB Packet Storm
227940 4.9 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の do_io_submit 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-3067 2012-12-26 12:01 2010-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
191 4.3 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 returns 128 bytes of uninitialized internal buffer contents when receiving HTTP POST requests to undefined paths, exposing server state to una… New CWE-125
Out-of-bounds Read
CVE-2026-36613 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
192 4.3 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 exposes an undocumented /agileconfigreset endpoint that returns internal buffer contents to unauthenticated attackers on the adjacent network. New CWE-200
Information Exposure
CVE-2026-36615 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
193 5.9 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 contains hardcoded WiFi driver credentials including a RADIUS shared secret, WPS test key, and default PSK embedded in the production firmware… New CWE-798
CWE-1188
 Use of Hard-coded Credentials
 Insecure Default Initialization of Resource
CVE-2026-36616 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
194 4.3 MEDIUM
Adjacent
- - Mercusys AC12G (EU) V1 with firmware AC12G(EU)_V1_200909 responds to version.bind CHAOS TXT queries, disclosing the DNS resolver software version (unbound 1.22.0), aiding targeted attacks against kno… New CWE-200
Information Exposure
CVE-2026-36618 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
195 - - - Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page New - CVE-2026-37700 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
196 - - - FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster parameters in HTML output, bypassing the `hid… New CWE-200
Information Exposure
CVE-2026-40495 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
197 - - - FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module does not validate the URL scheme of administrator-configured destination URLs befo… New CWE-601
Open Redirect
CVE-2026-43924 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
198 - - - FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset confirmation endpoint `/client/reset-password-confirm/:hash` is handled by a non-AP… New CWE-204
CWE-307
 Response Discrepancy Information Exposure
mproper Restriction of Excessive Authentication Attempts
CVE-2026-43926 2026-06-5 00:41 2026-06-4 Show GitHub Exploit DB Packet Storm
199 - - - GNCC GP5 v7.1.76 was discovered to store sensitive wireless network information in plaintext during routine operations to the serial console. This issue allows physically-proximate attackers to obtai… New - CVE-2026-36174 2026-06-5 00:41 2026-06-5 Show GitHub Exploit DB Packet Storm
200 - - - A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot sessi… New - CVE-2026-36180 2026-06-5 00:41 2026-06-5 Show GitHub Exploit DB Packet Storm