Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
234521 6.8 警告 Drupal - Drupal における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4553 2012-11-13 15:58 2012-10-17 Show GitHub Exploit DB Packet Storm
234522 7.5 危険 Quagga
インターネットイニシアティブ		 - Quagga の ecommunity_ecom2str 関数におけるにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3327 2012-11-13 15:11 2011-09-26 Show GitHub Exploit DB Packet Storm
234523 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospf_flood 関数におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3326 2012-11-13 15:10 2011-09-26 Show GitHub Exploit DB Packet Storm
234524 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospfd 内の ospf_packet.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3325 2012-11-13 15:09 2011-09-26 Show GitHub Exploit DB Packet Storm
234525 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospf6_lsa.c 内にある ospf6_lsa_is_changed 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3324 2012-11-13 15:08 2011-09-26 Show GitHub Exploit DB Packet Storm
234526 5 警告 Quagga
インターネットイニシアティブ		 - Quagga の ospf6d 内にある OSPFv3 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3323 2012-11-13 15:06 2011-09-26 Show GitHub Exploit DB Packet Storm
234527 6.8 警告 KDE project - KDE の Konqueror におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4515 2012-11-13 14:38 2012-11-11 Show GitHub Exploit DB Packet Storm
234528 5 警告 KDE project - KDE の Konqueror におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-4514 2012-11-13 14:38 2012-10-19 Show GitHub Exploit DB Packet Storm
234529 6.4 警告 KDE project - KDE の Konqueror におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-4513 2012-11-13 14:36 2012-11-11 Show GitHub Exploit DB Packet Storm
234530 6.8 警告 ISC, Inc. - INN の nnrpd における暗号化されたセッションにコマンドを挿入される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3523 2012-11-13 11:39 2012-08-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2931 7.5 HIGH
Network 		microsoft defender_antimalware_platform Microsoft Defender Denial of Service Vulnerability CWE-400
NVD-CWE-noinfo
 Uncontrolled Resource Consumption 		CVE-2026-45498 2026-05-27 02:16 2026-05-20 Show GitHub Exploit DB Packet Storm
2932 7.6 HIGH
Network 		- - MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper … CWE-89
SQL Injection 		CVE-2026-44680 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2933 4.3 MEDIUM
Network 		- - Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsing. The original validation logic parsed… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-44502 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2934 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn() in lua/upload/upload.go uses filepath.Join() with the caller-supplied directory but performs no boundary c… CWE-22
Path Traversal 		CVE-2026-43982 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2935 - - - Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, in engine/luahandler.go, the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Sin… CWE-362
Race Condition 		CVE-2026-43981 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2936 4.3 MEDIUM
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, you can access the local environment by specifying the URL of the local environment from "Image/File URL:" of "From a remote location" in "M… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-43936 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2937 8.1 HIGH
Network 		- - e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page allows attackers to manipulate the Host header to generate password reset l… CWE-20
CWE-807
 Improper Input Validation 
 Reliance on Untrusted Inputs in a Security Decision 		CVE-2026-43935 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2938 - - - A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service account access tokens. For succe… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-2264 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2939 7.8 HIGH
Local 		- - NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code exec… CWE-502
 Deserialization of Untrusted Data 		CVE-2026-24162 2026-05-27 02:16 2026-05-27 Show GitHub Exploit DB Packet Storm
2940 5.3 MEDIUM
Network 		concretecms concrete_cms Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys. To be vulnerable, a site would have to be configured in such a way that both public and private surveys are present on the site. An unau… CWE-565
CWE-639
 Reliance on Cookies without Validation and Integrity Checking
 Authorization Bypass Through User-Controlled Key 		CVE-2026-8337 2026-05-27 02:13 2026-05-22 Show GitHub Exploit DB Packet Storm