Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2361 8.8 重要
Network 		Jenkins プロジェクト Email Extension Plugin JenkinsのEmail Extension Pluginにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-48920 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2362 7.5 重要
Network 		Jenkins プロジェクト Credentials Binding JenkinsのCredentials Bindingにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-48922 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2363 4.3 警告
Network 		Jenkins プロジェクト AppSpider JenkinsのAppSpiderにおける権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2026-48923 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2364 4.3 警告
Network 		Jenkins プロジェクト Bitbucket OAuth JenkinsのBitbucket OAuthにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2026-48924 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2365 8.8 重要
Network 		Google Google Chrome GoogleのGoogle Chromeにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー 		CVE-2026-5272 2026-06-3 15:34 2026-04-1 Show GitHub Exploit DB Packet Storm
2366 5.5 警告
Local 		IBM IBM App Connect Enterprise IBMのIBM App Connect Enterpriseにおける重要な情報のセキュアでない格納に関する脆弱性 CWE-922
重要な情報のセキュアでない格納 		CVE-2026-5515 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2367 8.8 重要
Network 		Agilonhealth (MphRx) Minerva Agilonhealth (MphRx)のMinervaにおける認可に関する脆弱性 CWE-285
不適切な認可 		CVE-2026-5781 2026-06-3 15:34 2026-04-28 Show GitHub Exploit DB Packet Storm
2368 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6051 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2369 7.5 重要
Network 		IBM IBM DB2 IBMのIBM DB2におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇 		CVE-2026-6052 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
2370 5.5 警告
Local 		IBM IBM DB2 IBMのIBM DB2における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て 		CVE-2026-6053 2026-06-3 15:34 2026-05-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306741 - openttd openttd Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) craf… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3343 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306742 - openttd openttd Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3342 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306743 - openttd openttd Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDE… CWE-189
Numeric Errors 		CVE-2011-3341 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306744 - opera
microsoft
google
mozilla
siemens
haxx
redhat
debian
canonical 		opera_browser
internet_explorer
windows
chrome
firefox
simatic_rf68xr_firmware
simatic_rf615r_firmware
curl
enterprise_linux_server
enterprise_linux_server_aus
enterpris… 		The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode wi… CWE-326
Inadequate Encryption Strength 		CVE-2011-3389 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306745 - opera opera_browser Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an … CWE-200
Information Exposure 		CVE-2011-3388 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306746 - ibm openadmin_tool Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informi… CWE-79
Cross-site Scripting 		CVE-2011-3390 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306747 - ibm java The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a clas… CWE-20
 Improper Input Validation  		CVE-2011-3387 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306748 - medtronic paradigm_wireless_insulin_pump Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adv… NVD-CWE-noinfo
CVE-2011-3386 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306749 - websitebaker2
lepton-cms 		websitebaker
lepton 		Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors,… CWE-79
Cross-site Scripting 		CVE-2011-3385 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306750 - php php Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3268 2024-11-21 10:30 2011-08-26 Show GitHub Exploit DB Packet Storm