Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249991 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1335 2012-04-6 15:40 2012-04-4 Show GitHub Exploit DB Packet Storm
249992 5.8 警告 株式会社アイシーズ - せん茶SNS におけるセッション固定の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1238 2012-04-5 14:03 2012-04-5 Show GitHub Exploit DB Packet Storm
249993 2.6 注意 株式会社アイシーズ - せん茶SNS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1237 2012-04-5 14:02 2012-04-5 Show GitHub Exploit DB Packet Storm
249994 6.4 警告 東芝テック - 東芝テック製 e-Studio シリーズにおける認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2012-1239 2012-04-5 14:01 2012-04-5 Show GitHub Exploit DB Packet Storm
249995 6.8 警告 Scadatec Limited
TurboPower Abbrevia		 - TurboPower Abbrevia におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4535 2012-04-4 16:46 2011-12-28 Show GitHub Exploit DB Packet Storm
249996 4.3 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4045 2012-04-4 16:44 2011-09-28 Show GitHub Exploit DB Packet Storm
249997 5.8 警告 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおけるファイルを変更される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4044 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
249998 9.3 危険 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-4043 2012-04-4 16:40 2011-09-28 Show GitHub Exploit DB Packet Storm
249999 9.3 危険 ARC Informatique - 複数の ARC Informatique 製品の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4042 2012-04-4 16:38 2011-09-28 Show GitHub Exploit DB Packet Storm
250000 6.8 警告 Invensys - 複数の Invensys 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0258 2012-04-4 16:37 2012-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
161 5.5 MEDIUM
Local 		- - A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 fi… New CWE-369
 Divide By Zero 		CVE-2025-70100 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
162 6.5 MEDIUM
Network 		- - An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplying a specially crafted ext4 files… New CWE-125
Out-of-bounds Read 		CVE-2025-70101 2026-06-5 00:48 2026-06-3 Show GitHub Exploit DB Packet Storm
163 - - - Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. New CWE-259
Use of Hard-coded Password  		CVE-2026-22054 2026-06-5 00:48 2026-06-4 Show GitHub Exploit DB Packet Storm
164 - - - Active IQ OneCollect version 2.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations. New CWE-259
Use of Hard-coded Password  		CVE-2026-22055 2026-06-5 00:48 2026-06-4 Show GitHub Exploit DB Packet Storm
165 - - - In affected versions of Octopus Server, permissions were not checked correctly resulting in any authenticated user being able to make server level changes using a certain API endpoint despite receivi… New CWE-862
 Missing Authorization 		CVE-2026-4881 2026-06-5 00:48 2026-06-4 Show GitHub Exploit DB Packet Storm
166 7.5 HIGH
Network 		- - React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @remix-run/server-runtime, certain crafted requests can consume disproportio… New CWE-400
 Uncontrolled Resource Consumption 		CVE-2026-42342 2026-06-5 00:43 2026-06-3 Show GitHub Exploit DB Packet Storm
167 - - - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies. When Tesla.Middleware.… New CWE-409
 Improper Handling of Highly Compressed Data (Data Amplification) 		CVE-2026-48594 2026-06-5 00:42 2026-06-3 Show GitHub Exploit DB Packet Storm
168 - - - Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects. Tesla.Middleware.FollowRedirects strips securit… New CWE-178
 Improper Handling of Case Sensitivity 		CVE-2026-48595 2026-06-5 00:42 2026-06-3 Show GitHub Exploit DB Packet Storm
169 - - - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesla.Multipart.add_content_type_par… New CWE-113
HTTP Response Splitting 		CVE-2026-48596 2026-06-5 00:42 2026-06-3 Show GitHub Exploit DB Packet Storm
170 - - - Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint. Tesla.Adapter.Mint.open_conn/2 conv… New CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-48597 2026-06-5 00:42 2026-06-3 Show GitHub Exploit DB Packet Storm