Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
236031	7.5	危険	レッドハットサイバートラスト株式会社 Mozilla Foundation VMware オラクル	-	複数の Mozilla 製品の SSL 実装における暗号保護メカニズムを回避される脆弱性	CWE-310 暗号の問題	CVE-2010-3173	2012-12-18 17:37	2010-10-19	Show	GitHub Exploit DB Packet Storm

236032	4.3	警告	レッドハットサイバートラスト株式会社 Mozilla Foundation VMware オラクル	-	複数の Mozilla 製品における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2010-3170	2012-12-18 17:36	2010-10-19	Show	GitHub Exploit DB Packet Storm

236033	6.4	警告	サイバートラスト株式会社 VMware レッドハット	-	libuser におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-0002	2012-12-18 17:35	2011-01-20	Show	GitHub Exploit DB Packet Storm

236034	4.3	警告	アップルサイバートラスト株式会社ブルーコートシステムズヒューレット・パッカード OpenSSL Project オラクル VMware レッドハット	-	OpenSSL における暗号スイートのダウングレードに関する脆弱性	CWE-DesignError	CVE-2010-4180	2012-12-18 17:34	2010-12-2	Show	GitHub Exploit DB Packet Storm

236035	4.3	警告	サイバートラスト株式会社 VMware OpenSSL Project レッドハットオラクル	-	OpenSSL における暗号を強制的に利用される脆弱性	CWE-310 暗号の問題	CVE-2008-7270	2012-12-18 17:31	2010-12-6	Show	GitHub Exploit DB Packet Storm

236036	5	警告	GNU Project VMware	-	GNU C Library の posix/fnmatch.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1659	2012-12-18 17:16	2011-04-8	Show	GitHub Exploit DB Packet Storm

236037	3.7	注意	GNU Project VMware	-	GNU C Library の ld.so における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1658	2012-12-18 17:14	2011-04-8	Show	GitHub Exploit DB Packet Storm

236038	6.2	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の locale/programs/locale.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1095	2012-12-18 17:12	2011-04-4	Show	GitHub Exploit DB Packet Storm

236039	5.1	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library および Embedded GLIBC における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1071	2012-12-18 17:10	2011-04-4	Show	GitHub Exploit DB Packet Storm

236040	6.9	警告	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C Library の elf/dl-object.c における権限を取得される脆弱性	CWE-Other その他	CVE-2011-0536	2012-12-18 17:07	2011-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
3291	-		-	-	Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips securit…	CWE-178 Improper Handling of Case Sensitivity	CVE-2026-48595	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm

3292	-		-	-	Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_par…	CWE-113 HTTP Response Splitting	CVE-2026-48596	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm

3293	-		-	-	Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.open_conn/2 conv…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2026-48597	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm

3294	-		-	-	Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part_headers_fo…	CWE-116 Improper Encoding or Escaping of Output	CVE-2026-48598	2026-06-5 00:42	2026-06-3	Show	GitHub Exploit DB Packet Storm

3295	6.3	MEDIUM Network	-	-	A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the ar…	CWE-74 CWE-89 Injection SQL Injection	CVE-2026-10811	2026-06-5 00:41	2026-06-5	Show	GitHub Exploit DB Packet Storm

3296	-		-	-	GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in version 11.0.7.	CWE-79 Cross-site Scripting	CVE-2026-40108	2026-06-5 00:41	2026-06-3	Show	GitHub Exploit DB Packet Storm

3297	9.0	CRITICAL Network	-	-	RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.	CWE-79 Cross-site Scripting	CVE-2026-36748	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3298	-		-	-	GLPI is a free asset and IT management software package. Starting in version 0.78 and prior to versions 10.0.25 and 11.0.7, a technician can delete arbitrary files from the filesystem as long as the …	CWE-862 Missing Authorization	CVE-2026-42317	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3299	-		-	-	GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI.…	CWE-862 Missing Authorization	CVE-2026-42318	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

3300	-		-	-	GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 10.0.25 and 11.0.7, a technician can read arbitrary files inside the GLPI_DOC_DIR. Upgrade to 1…	CWE-862 Missing Authorization	CVE-2026-42320	2026-06-5 00:41	2026-06-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed