Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252031 5 警告 オラクル - Oracle iPlanet Web Server における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2009-2445 2011-07-25 12:01 2009-07-13 Show GitHub Exploit DB Packet Storm
252032 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-2613 2011-07-25 11:51 2011-06-28 Show GitHub Exploit DB Packet Storm
252033 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2612 2011-07-25 11:51 2011-06-28 Show GitHub Exploit DB Packet Storm
252034 4.3 警告 Opera Software ASA - Opera の印刷機能におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2611 2011-07-25 11:50 2011-06-28 Show GitHub Exploit DB Packet Storm
252035 10 危険 Opera Software ASA - Opera における脆弱性 CWE-noinfo
情報不足
CVE-2011-2610 2011-07-25 11:49 2011-06-28 Show GitHub Exploit DB Packet Storm
252036 4.3 警告 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2609 2011-07-25 11:48 2011-06-28 Show GitHub Exploit DB Packet Storm
252037 7.2 危険 マイクロソフト - Microsoft Windows の CSRSS における権限昇格またはサービス運用妨害 (メモリ破損) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1870 2011-07-25 11:12 2011-07-12 Show GitHub Exploit DB Packet Storm
252038 7.2 危険 マイクロソフト - Microsoft Windows の CSRSS における権限昇格またはサービス運用妨害 (メモリ破損) の脆弱性 CWE-189
数値処理の問題
CVE-2011-1284 2011-07-25 11:11 2011-07-12 Show GitHub Exploit DB Packet Storm
252039 7.2 危険 マイクロソフト - Microsoft Windows の CSRSS における権限昇格またはサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2011-1283 2011-07-25 11:10 2011-07-12 Show GitHub Exploit DB Packet Storm
252040 7.2 危険 マイクロソフト - Microsoft Windows の CSRSS における権限昇格またはサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2011-1282 2011-07-25 11:10 2011-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4021 9.1 CRITICAL
Network
espocrm espocrm EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, EspoCRM's built-in formula scripting engine allowing updating attachment's sourceId thus allowing an au… CWE-22
Path Traversal
CVE-2026-33656 2026-04-28 02:04 2026-04-23 Show GitHub Exploit DB Packet Storm
4022 7.8 HIGH
Local
radare radare2 radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with … CWE-78
OS Command 
CVE-2026-40517 2026-04-28 02:04 2026-04-23 Show GitHub Exploit DB Packet Storm
4023 7.5 HIGH
Network
powerdns recursor An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-33256 2026-04-28 02:04 2026-04-22 Show GitHub Exploit DB Packet Storm
4024 7.5 HIGH
Network
powerdns authoritative
dnsdist
recursor
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-33257 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
4025 7.5 HIGH
Network
powerdns recursor By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-33258 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
4026 5.0 MEDIUM
Network
powerdns recursor Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur wi… CWE-416
 Use After Free
CVE-2026-33259 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
4027 7.5 HIGH
Network
powerdns authoritative
dnsdist
recursor
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-33260 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
4028 5.9 MEDIUM
Network
powerdns recursor A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service. CWE-353
 Missing Support for Integrity Check
CVE-2026-33261 2026-04-28 02:03 2026-04-22 Show GitHub Exploit DB Packet Storm
4029 5.9 MEDIUM
Network
powerdns recursor An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default. CWE-476
 NULL Pointer Dereference
CVE-2026-33262 2026-04-28 02:02 2026-04-22 Show GitHub Exploit DB Packet Storm
4030 5.0 MEDIUM
Network
froxlor froxlor Froxlor is open source server administration software. Prior to version 2.3.6, in `EmailSender::add()`, the domain ownership validation for full email sender aliases uses the wrong array index when s… CWE-863
 Incorrect Authorization
CVE-2026-41232 2026-04-28 02:02 2026-04-23 Show GitHub Exploit DB Packet Storm