Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
235721 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1948 2012-12-14 18:07 2012-07-17 Show GitHub Exploit DB Packet Storm
235722 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL サブシステムにおける任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2012-5838 2012-12-14 18:02 2012-11-20 Show GitHub Exploit DB Packet Storm
235723 6.8 警告 Mozilla Foundation - Mozilla Firefox の Web 開発ツールバーにおけるクロスサイトスクリプティングの脆弱性 CWE-94
コード・インジェクション
CVE-2012-5837 2012-12-14 18:01 2012-11-20 Show GitHub Exploit DB Packet Storm
235724 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-5836 2012-12-14 17:59 2012-11-20 Show GitHub Exploit DB Packet Storm
235725 10 危険 Mozilla Foundation - 複数の Mozilla 製品の BuildTextRunsScanner::BreakSink::SetBreaks 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4218 2012-12-14 17:53 2012-11-20 Show GitHub Exploit DB Packet Storm
235726 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsViewManager::ProcessPendingUpdates 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4217 2012-12-14 17:52 2012-11-20 Show GitHub Exploit DB Packet Storm
235727 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsEditor::FindNextLeafNode 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4213 2012-12-14 16:58 2012-11-20 Show GitHub Exploit DB Packet Storm
235728 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-4212 2012-12-14 16:56 2012-11-20 Show GitHub Exploit DB Packet Storm
235729 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の XrayWrapper の実装におけるクローム専用の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4208 2012-12-14 16:50 2012-11-20 Show GitHub Exploit DB Packet Storm
235730 10 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-4204 2012-12-14 16:47 2012-11-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3231 8.2 HIGH
Network
- - A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) fiel… CWE-1284
 Improper Validation of Specified Quantity in Input
CVE-2026-42013 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
3232 7.1 HIGH
Network
- - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject A… CWE-295
Improper Certificate Validation 
CVE-2026-42012 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
3233 6.5 MEDIUM
Network
apache flink_kubernetes_operator Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so th… CWE-552
CWE-918
 Files or Directories Accessible to External Parties
Server-Side Request Forgery (SSRF) 
CVE-2026-40564 2026-06-3 01:16 2026-05-27 Show GitHub Exploit DB Packet Storm
3234 - - - Path traversal vulnerability in Gleam's handling of custom documentation pages allows arbitrary file read and file write outside the intended documentation output directory. The documentation.pages … CWE-22
Path Traversal
CVE-2026-32685 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3235 4.3 MEDIUM
Network
- - NamelessMC is website software for Minecraft servers. A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in version 2.2.4 in the id parameter of the endpoint `/index.php?route=/queri… CWE-79
Cross-site Scripting
CVE-2026-32250 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3236 7.8 HIGH
Local
google android In validateNode of ResourceTypes.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges… CWE-125
Out-of-bounds Read
CVE-2026-0076 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3237 7.5 HIGH
Network
- - A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesyste… CWE-476
 NULL Pointer Dereference
CVE-2025-70099 2026-06-3 01:16 2026-06-2 Show GitHub Exploit DB Packet Storm
3238 6.6 MEDIUM
Network
jenkins ldap Jenkins LDAP Plugin 807.v7d7de30930cf and earlier deserializes data from LDAP referrals without validation. CWE-502
 Deserialization of Untrusted Data
CVE-2026-48917 2026-06-3 01:14 2026-05-28 Show GitHub Exploit DB Packet Storm
3239 6.6 MEDIUM
Network
jenkins ldap Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2026-48916 2026-06-3 01:13 2026-05-28 Show GitHub Exploit DB Packet Storm
3240 5.6 MEDIUM
Local
synology assistant An origin validation error vulnerability in Synology Assistant before 7.0.6-50085 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation. CWE-346
 Origin Validation Error
CVE-2025-66593 2026-06-3 01:09 2026-05-27 Show GitHub Exploit DB Packet Storm