Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2321 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35077 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2322 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35078 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2323 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35079 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2324 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-35080 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2325 8.1 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-35081 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2326 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-35082 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2327 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35083 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2328 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35084 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2329 8.8 重要
Network 		MBS GmbH Universal Gateway Firmware MBS GmbHのUniversal Gateway Firmwareにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-35085 2026-06-9 14:11 2026-06-3 Show GitHub Exploit DB Packet Storm
2330 7.5 重要
Network 		レッドハット
GNU Project		 Redhat Enterprise Linux For Power Little Endian Els
Red Hat Enterprise Linux for IBM z Systems - Extended Updat… 		GNU Project等の複数ベンダの製品におけるAPI への入力に対する未定義の動作に関する脆弱性 CWE-475
API への入力に対する未定義の動作 		CVE-2026-42009 2026-06-9 14:11 2026-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307361 - adobe shockwave_player Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir media file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2421 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307362 - adobe shockwave_player Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2420 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307363 - adobe shockwave_player IML32.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2419 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307364 - hp palm_webos Cross-site scripting (XSS) vulnerability in the Calendar application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2011-2409 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307365 - hp palm_webos Cross-site scripting (XSS) vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2011-2408 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307366 - hp openview_performance_insight Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors. NVD-CWE-noinfo
CVE-2011-2407 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307367 - hp openview_performance_insight Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via u… CWE-79
Cross-site Scripting 		CVE-2011-2406 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307368 - hp proliant_sl_advanced_power_manager
proliant_sl_advanced_power_manager_firmware 		The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2011-2405 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307369 - hp easy_printer_care_software A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program,… CWE-94
Code Injection 		CVE-2011-2404 2024-11-21 10:28 2011-08-12 Show GitHub Exploit DB Packet Storm
307370 - adobe flash_player
adobe_air 		Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, al… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-2425 2024-11-21 10:28 2011-08-11 Show GitHub Exploit DB Packet Storm