Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250021 7.5 危険 OpenTTD - OpenTTD におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3342 2012-03-27 18:43 2011-09-8 Show GitHub Exploit DB Packet Storm
250022 7.5 危険 OpenTTD - OpenTTD における任意のファイルを実行される脆弱性 CWE-189
数値処理の問題
CVE-2011-3341 2012-03-27 18:43 2011-09-8 Show GitHub Exploit DB Packet Storm
250023 2.6 注意 Wireshark - Wireshark の proto_tree_add_item 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3266 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250024 5 警告 Zabbix - Zabbix の popup.php における任意のデータベーステーブルのコンテンツを読まれる脆弱性 CWE-200
情報漏えい
CVE-2011-3265 2012-03-27 18:43 2011-05-25 Show GitHub Exploit DB Packet Storm
250025 2.1 注意 シトリックス・システムズ - Xen の tools/libxc/xc_dom_bzimageloader.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3262 2012-03-27 18:43 2011-08-19 Show GitHub Exploit DB Packet Storm
250026 7.5 危険 CMU - Cyrus IMAP の nntpd の split_wildmats 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3208 2012-03-27 18:43 2011-09-8 Show GitHub Exploit DB Packet Storm
250027 3.3 注意 geoff wong - Hammerhead の hammerhead.cc における任意のファイルに書き込まれる脆弱性 CWE-59
リンク解釈の問題
CVE-2011-3204 2012-03-27 18:43 2011-09-6 Show GitHub Exploit DB Packet Storm
250028 5 警告 Adiscon - rsyslog の parseLegacySyslogMsg 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3200 2012-03-27 18:43 2011-09-6 Show GitHub Exploit DB Packet Storm
250029 4.3 警告 Ruby on Rails project - Ruby on Rails の to_s メソッドにおける任意のテキストをログファイルに挿入される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3187 2012-03-27 18:43 2011-08-29 Show GitHub Exploit DB Packet Storm
250030 4.3 警告 Ruby on Rails project - Ruby on Rails の actionpack/lib/action_controller/response.rb における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2011-3186 2012-03-27 18:43 2011-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
3171 4.3 MEDIUM
Network
glpi-project glpi GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, an authenticated user with forms READ permission can export the structure of unauthorized forms. This issue… CWE-862
 Missing Authorization
CVE-2026-32312 2026-05-22 08:57 2026-05-19 Show GitHub Exploit DB Packet Storm
3172 3.5 LOW
Network
github cli `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users vie… CWE-150
 Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2026-45803 2026-05-22 08:47 2026-05-16 Show GitHub Exploit DB Packet Storm
3173 10.0 CRITICAL
Network
microsoft azure_local
azure_resource_manager
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network. CWE-287
NVD-CWE-noinfo
Improper Authentication
CVE-2026-42822 2026-05-22 08:45 2026-05-19 Show GitHub Exploit DB Packet Storm
3174 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-5297 2026-05-22 08:16 2026-05-22 Show GitHub Exploit DB Packet Storm
3175 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accid… - CVE-2026-8352 2026-05-22 06:16 2026-05-22 Show GitHub Exploit DB Packet Storm
3176 8.8 HIGH
Network
- - IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the… CWE-88
Argument Injection
CVE-2026-47114 2026-05-22 06:03 2026-05-22 Show GitHub Exploit DB Packet Storm
3177 4.3 MEDIUM
Network
- - The GSheet For Woo Importer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the process_ajax_restore_action() function in all versions up to, and … CWE-862
 Missing Authorization
CVE-2026-4843 2026-05-22 06:03 2026-05-22 Show GitHub Exploit DB Packet Storm
3178 6.1 MEDIUM
Network
simplesamlphp simplesamlphp-casserver
simplesamlphp_casserver
SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redire… CWE-601
Open Redirect
CVE-2025-65954 2026-05-22 06:01 2026-05-19 Show GitHub Exploit DB Packet Storm
3179 7.5 HIGH
Network
mozilla firefox
firefox_focus
Sandbox escape in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 151. CWE-693
 Protection Mechanism Failure
CVE-2026-8945 2026-05-22 05:56 2026-05-19 Show GitHub Exploit DB Packet Storm
3180 4.8 MEDIUM
Network
samba rsync Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass host… CWE-289
 Authentication Bypass by Alternate Name
CVE-2026-43617 2026-05-22 05:54 2026-05-20 Show GitHub Exploit DB Packet Storm