Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228791 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5259 2012-12-26 14:23 2012-10-8 Show GitHub Exploit DB Packet Storm
228792 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-5258 2012-12-26 14:22 2012-10-8 Show GitHub Exploit DB Packet Storm
228793 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5257 2012-12-26 14:06 2012-10-8 Show GitHub Exploit DB Packet Storm
228794 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-5256 2012-12-26 14:02 2012-10-8 Show GitHub Exploit DB Packet Storm
228795 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5248 2012-12-26 14:01 2012-10-8 Show GitHub Exploit DB Packet Storm
228796 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5255 2012-12-26 14:01 2012-10-8 Show GitHub Exploit DB Packet Storm
228797 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5254 2012-12-26 13:59 2012-10-8 Show GitHub Exploit DB Packet Storm
228798 5 警告 マイクロソフト
アドビシステムズ		 - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2012-4171 2012-12-26 13:59 2012-08-30 Show GitHub Exploit DB Packet Storm
228799 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5253 2012-12-26 13:58 2012-10-8 Show GitHub Exploit DB Packet Storm
228800 4.3 警告 マイクロソフト
アドビシステムズ		 - Adobe Flash Player におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-4168 2012-12-26 13:58 2012-08-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2041 3.6 LOW
Local 		lfprojects mlflow A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipu… CWE-327
CWE-328
 Use of a Broken or Risky Cryptographic Algorithm
 Use of Weak Hash 		CVE-2026-10803 2026-06-5 03:24 2026-06-4 Show GitHub Exploit DB Packet Storm
2042 2.2 LOW
Network 		- - In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set device_owner to a value that has "network:" at the beginning ("n… CWE-863
 Incorrect Authorization 		CVE-2026-50266 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2043 7.4 HIGH
Network 		- - An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When ssl… CWE-297
 Improper Validation of Certificate with Host Mismatch 		CVE-2026-44393 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2044 9.9 CRITICAL
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose a public `/image/<hash>` route that resolves attacker-controlled entries from `image_has… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43986 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2045 8.9 HIGH
Network 		- - Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose `log_js_errors` to any authenticated user, including guest users when guest access is en… CWE-79
Cross-site Scripting 		CVE-2026-43984 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2046 - - - unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. Thi… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2026-3276 2026-06-5 03:16 2026-06-4 Show GitHub Exploit DB Packet Storm
2047 7.8 HIGH
Local 		- - Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceSingleton .NET Remot… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-25551 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2048 9.8 CRITICAL
Network 		- - Seagull Software BarTender 2010, 2016, and 2019 contain an unauthenticated remote code execution vulnerability in the .NET Remoting service exposed on TCP port 7375 via BtSystem.Service.exe. The serv… CWE-306
CWE-502
Missing Authentication for Critical Function
 Deserialization of Untrusted Data 		CVE-2026-25550 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2049 9.8 CRITICAL
Network 		- - OSNexus QuantaStor SDS Manager is vulnerable to SQL injection in the login endpoint. The username field is not properly sanitized before being incorporated into a SQL query, allowing an unauthenticat… CWE-89
SQL Injection 		CVE-2026-10880 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm
2050 7.5 HIGH
Network 		- - nvm (Node Version Manager) through 0.40.4 executes arbitrary commands from version strings supplied by the configured Node.js/io.js mirror. Commands such as `nvm install` read the available versions … CWE-78
OS Command  		CVE-2026-10796 2026-06-5 03:16 2026-06-5 Show GitHub Exploit DB Packet Storm