Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228881	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

228882	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

228883	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2011-2456	2013-03-27 17:26	2011-11-10	Show	GitHub Exploit DB Packet Storm

228884	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2455	2013-03-27 17:25	2011-11-10	Show	GitHub Exploit DB Packet Storm

228885	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2454	2013-03-27 17:24	2011-11-10	Show	GitHub Exploit DB Packet Storm

228886	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2453	2013-03-27 17:22	2011-11-10	Show	GitHub Exploit DB Packet Storm

228887	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2452	2013-03-27 17:19	2011-11-10	Show	GitHub Exploit DB Packet Storm

228888	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2451	2013-03-27 17:18	2011-11-10	Show	GitHub Exploit DB Packet Storm

228889	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2450	2013-03-27 17:16	2011-11-10	Show	GitHub Exploit DB Packet Storm

228890	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2445	2013-03-27 17:14	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3141	7.2	HIGH Network	-	-	The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.3 via the `sa…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2026-10586	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm

3142	6.3	MEDIUM Network	-	-	A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper…	CWE-266 CWE-285 Incorrect Privilege Assignment Improper Authorization	CVE-2026-10876	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm

3143	7.3	HIGH Network	-	-	A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10877	2026-06-5 22:26	2026-06-5	Show	GitHub Exploit DB Packet Storm

3144	6.1	MEDIUM Network	citeum	opencti	OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Versions prior to 7.260227.0 are vulnerable to XSS in the rendering of email-message observable bo…	CWE-79 Cross-site Scripting	CVE-2026-35212	2026-06-5 22:07	2026-06-3	Show	GitHub Exploit DB Packet Storm

3145	3.1	LOW Network	djangoproject	django	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not add `Authorization` to the `Vary` response header for requ…	CWE-524 Use of Cache Containing Sensitive Information	CVE-2026-35193	2026-06-5 22:03	2026-06-3	Show	GitHub Exploit DB Packet Storm

3146	5.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.utils.cache.has_vary_header()` in Django does not strip leading or trailing whitespace from `Vary` response header va…	CWE-1023 Incomplete Comparison with Missing Factors	CVE-2026-48587	2026-06-5 22:03	2026-06-3	Show	GitHub Exploit DB Packet Storm

3147	4.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.http.HttpRequest.get_signed_cookie` in Django uses a non-injective salt derivation (concatenating the cookie name and…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2026-6873	2026-06-5 21:58	2026-06-3	Show	GitHub Exploit DB Packet Storm

3148	3.1	LOW Network	djangoproject	django	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15. `django.core.mail.backends.smtp.EmailBackend` in Django fails to prevent reuse of a partially-initialized connection after a …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2026-7666	2026-06-5 21:46	2026-06-3	Show	GitHub Exploit DB Packet Storm

3149	5.3	MEDIUM Network	djangoproject	django	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. `django.middleware.cache.UpdateCacheMiddleware` in Django does not match `Cache-Control` response directives case-insensitive…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-8404	2026-06-5 21:38	2026-06-3	Show	GitHub Exploit DB Packet Storm

3150	5.3	MEDIUM Network	exim	exim	Exim 4.88 before 4.99.4, in some proxy configurations, mishandles certain short payloads, leading to disclosure of uninitialized stack memory values to a client.	CWE-839 Numeric Range Comparison Without Minimum Check	CVE-2026-48840	2026-06-5 20:16	2026-05-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed