Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2301	8.7	重要 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-8589	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2302	6.5	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-9204	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2303	4.3	警告 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおける置換文字列の無害化に関する脆弱性	CWE-153 置換文字列の不適切な無害化	CVE-2026-9694	2026-06-12 14:44	2026-06-11	Show	GitHub Exploit DB Packet Storm

2304	7.8	重要 Local	The Open Group	Unix	opengroupのUnixにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2025-71263	2026-06-12 14:35	2026-03-13	Show	GitHub Exploit DB Packet Storm

2305	7.5	重要 Network	Dana Powers (dpkp)	kafka-python	Dana Powers (dpkp)のkafka-pythonにおける過剰なサイズ値のメモリ割り当てに関する脆弱性	CWE-789 過剰なサイズ値のメモリ割り当て	CVE-2026-10142	2026-06-12 14:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

2306	7.5	重要 Network	Dana Powers (dpkp)	kafka-python	Dana Powers (dpkp)のkafka-pythonにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-10143	2026-06-12 14:35	2026-06-10	Show	GitHub Exploit DB Packet Storm

2307	7.8	重要 Local	マイクロソフト	Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft&nb…	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-843 型の取り違え	CVE-2026-44817	2026-06-12 14:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

2308	7	重要 Local	マイクロソフト	Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft&nb…	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-362 競合状態	CVE-2026-44818	2026-06-12 14:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

2309	7.8	重要 Local	マイクロソフト	Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft&nb…	Microsoft Office のリモートコードが実行される脆弱性	CWE-122 ヒープオーバーフロー	CVE-2026-44819	2026-06-12 14:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

2310	7.8	重要 Local	マイクロソフト	Microsoft Office 2024 Long-Term Servicing Channel Edition Microsoft Office 2021 Long Term Servicing Channel Edition Microsoft&nb…	Microsoft Excel のリモートでコードが実行される脆弱性	CWE-125 境界外読み取り	CVE-2026-44820	2026-06-12 14:35	2026-06-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 29, 2026, 4:19 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305911	-	ajaxplorer	ajaxplorer	AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by leveraging knowledge of a password hash.	CWE-287 Improper Authentication	CVE-2012-1840	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305912	-	ajaxplorer	ajaxplorer	Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers…	CWE-22 Path Traversal	CVE-2012-1839	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305913	-	lg-nortel	elo_gs24m_switch	The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a dire…	CWE-287 Improper Authentication	CVE-2012-1838	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305914	-	ibm	tivoli_endpoint_manager	The (1) webreports, (2) post/create-role, and (3) post/update-role programs in IBM Tivoli Endpoint Manager (TEM) before 8.2 do not include the HTTPOnly flag in a Set-Cookie header for a cookie, which…	CWE-200 Information Exposure	CVE-2012-1837	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305915	-	inspircd	inspircd	Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-1836	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305916	-	broadcom	arcserve_backup	CA ARCserve Backup r12.0 through SP2, r12.5 before SP2, r15 through SP1, and r16 before SP1 on Windows allows remote attackers to cause a denial of service (service shutdown) via a crafted network re…	CWE-20 Improper Input Validation	CVE-2012-1662	2024-11-21 10:37	2012-03-22	Show	GitHub Exploit DB Packet Storm

305917	-	clamav sophos	clamav sophos_anti-virus	The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafted reset interval in the LZXC header of a CHM file. NOTE: t…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1458	2024-11-21 10:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

305918	-	rising-global eset	rising_antivirus nod32_antivirus	The CAB file parser in NOD32 Antivirus 5795 and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via a CAB file with a modified vMinor version field. NOTE: this may l…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1455	2024-11-21 10:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

305919	-	cat ikarus emsisoft	quick_heal ikarus_virus_utilities_t3_command_line_scanner anti-malware	The CAB file parser in Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Quick Heal (aka Cat QuickHeal) 11.00 allows remote attackers to bypass malware detec…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1452	2024-11-21 10:37	2012-03-21	Show	GitHub Exploit DB Packet Storm

305920	-	bitdefender ahnlab norman f-secure f-prot cat authentium nprotect aladdin pandasecurity comodo mcafee	bitdefender v3_internet_security norman_antivirus_\&_antispyware f-secure_anti-virus f-prot_antivirus quick_heal command_antivirus nprotect_antivirus esafe panda_antivi…	The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Anti…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-1463	2024-11-21 10:37	2012-03-21	Show	GitHub Exploit DB Packet Storm