Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2311	7.8	重要 Local	BitDefender	napoca	BitDefenderのnapocaにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-10046	2026-06-9 14:12	2026-06-2	Show	GitHub Exploit DB Packet Storm

2312	7.8	重要 Local	BitDefender	napoca	BitDefenderのnapocaにおける境界外書き込みに関する脆弱性	CWE-787 境界外書き込み	CVE-2026-10047	2026-06-9 14:11	2026-06-2	Show	GitHub Exploit DB Packet Storm

2313	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における不正な構文構造の不適切な処理に関する脆弱性	CWE-228 不正な構文構造の不適切な処理	CVE-2026-25657	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

2314	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性	CWE-230 欠損値の不適切な処理	CVE-2026-25658	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

2315	6.5	警告 Adjacent	エリクソン	Packet Core Gateway (PCG)	エリクソンのPacket Core Gateway (PCG)における欠損値の不適切な処理に関する脆弱性	CWE-230 欠損値の不適切な処理	CVE-2026-25659	2026-06-9 14:11	2026-06-5	Show	GitHub Exploit DB Packet Storm

2316	9.8	緊急 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるデフォルトのパスワードの使用に関する脆弱性	CWE-1393 デフォルトのパスワードの使用	CVE-2026-35075	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

2317	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35076	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

2318	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35077	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

2319	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35078	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

2320	8.1	重要 Network	MBS GmbH	Universal Gateway Firmware	MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性	CWE-73 ファイル名やパス名の外部制御	CVE-2026-35079	2026-06-9 14:11	2026-06-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306191	-	plone	plone cmfeditions	The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4030	2024-11-21 10:31	2011-10-10	Show	GitHub Exploit DB Packet Storm

306192	-	vmware	workstation player fusion ams	Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitrary code via a crafte…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3868	2024-11-21 10:31	2011-10-8	Show	GitHub Exploit DB Packet Storm

306193	-	ibm	aix	The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors …	CWE-399 Resource Management Errors	CVE-2011-3982	2024-11-21 10:31	2011-10-5	Show	GitHub Exploit DB Packet Storm

306194	-	google	chrome	Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecif…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3873	2024-11-21 10:31	2011-10-5	Show	GitHub Exploit DB Packet Storm

306195	-	likno	allwebmenus_plugin	PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.	CWE-94 Code Injection	CVE-2011-3981	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm

306196	-	jerome_schneider	ameos_dragndropupload	Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors.	NVD-CWE-noinfo	CVE-2011-3980	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm

306197	-	zikula	zikula_application_framework	Cross-site scripting (XSS) vulnerability in ztemp/view_compiled/Theme/theme_admin_setasdefault.php in the theme module in Zikula Application Framework 1.3.0 build 3168, 1.2.7, and probably other vers…	CWE-79 Cross-site Scripting	CVE-2011-3979	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm

306198	-	lightneasy	lightneasy	Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) comment…	CWE-79 Cross-site Scripting	CVE-2011-3978	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm

306199	-	nomachine	nx_server nx_node	Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server 3.x before 3.5.0-5 allows local users to read arbitrary files via unknown vectors.	NVD-CWE-noinfo	CVE-2011-3977	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm

306200	-	ammsoft	scriptftp	Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-3976	2024-11-21 10:31	2011-10-4	Show	GitHub Exploit DB Packet Storm