Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252071 10 危険 ヒューレット・パッカード - HP Data Protector Express における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0121 2012-03-15 16:09 2012-03-12 Show GitHub Exploit DB Packet Storm
252072 7.5 危険 GNU Project - GnuTLS の libgnutls におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1663 2012-03-15 15:56 2012-03-13 Show GitHub Exploit DB Packet Storm
252073 5 警告 アドビシステムズ - Adobe ColdFusion におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-Other
その他 		CVE-2012-0770 2012-03-15 15:54 2012-03-13 Show GitHub Exploit DB Packet Storm
252074 5 警告 TIBCO Software - 複数の TIBCO Spotfire 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0690 2012-03-15 11:16 2012-03-8 Show GitHub Exploit DB Packet Storm
252075 5 警告 TIBCO Software - 複数の TIBCO 製品における証明書情報を発見される脆弱性 CWE-200
情報漏えい 		CVE-2012-0689 2012-03-15 11:15 2012-03-8 Show GitHub Exploit DB Packet Storm
252076 4.3 警告 TIBCO Software - 複数の TIBCO 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0688 2012-03-15 11:15 2012-03-8 Show GitHub Exploit DB Packet Storm
252077 5 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0687 2012-03-15 11:14 2012-03-8 Show GitHub Exploit DB Packet Storm
252078 5 警告 IBM - 複数の IBM 製品におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1394 2012-03-14 16:24 2012-02-14 Show GitHub Exploit DB Packet Storm
252079 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1395 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
252080 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1396 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5571 6.5 MEDIUM
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Parsing a malicio… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2026-28918 2026-05-13 22:57 2026-05-12 Show GitHub Exploit DB Packet Storm
5572 9.8 CRITICAL
Network 		gnu
redhat 		gnutls
hardened_images
openshift_container_platform
enterprise_linux 		A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacke… CWE-626
 Null Byte Interaction Error (Poison Null Byte) 		CVE-2026-42010 2026-05-13 22:54 2026-05-7 Show GitHub Exploit DB Packet Storm
5573 7.5 HIGH
Network 		apple ipados
iphone_os
macos
tvos
visionos
watchos 		A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26… CWE-121
Stack-based Buffer Overflow 		CVE-2026-28846 2026-05-13 22:46 2026-05-12 Show GitHub Exploit DB Packet Storm
5574 6.1 MEDIUM
Network 		th30d4y w4nn4d13\/ip In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was direc… CWE-79
CWE-80
Cross-site Scripting
Basic XSS 		CVE-2026-41575 2026-05-13 06:11 2026-05-9 Show GitHub Exploit DB Packet Storm
5575 8.1 HIGH
Network 		inducer relate RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16. CWE-208
CWE-203
 Information Exposure Through Timing Discrepancy
 Information Exposure Through Discrepancy 		CVE-2026-41588 2026-05-13 06:09 2026-05-9 Show GitHub Exploit DB Packet Storm
5576 7.5 HIGH
Network 		fohrloop dash-uploader An issue in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code via the dash_uploader/httprequesthandler.py, dash_uploader/upload.py in the Upload func… NVD-CWE-noinfo
CWE-400
CWE-670
 Uncontrolled Resource Consumption
 Always-Incorrect Control Flow Implementation 		CVE-2026-38361 2026-05-13 05:55 2026-05-9 Show GitHub Exploit DB Packet Storm
5577 7.2 HIGH
Network 		dolibarr dolibarr_erp\/crm Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contains an authenticated remote code execution vulnerabilit… CWE-74
Injection 		CVE-2025-67486 2026-05-13 05:54 2026-05-9 Show GitHub Exploit DB Packet Storm
5578 9.9 CRITICAL
Network 		pfsense pfsense Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only available to admins and they are intentionally all… CWE-284
CWE-915
Improper Access Control
 Improperly Controlled Modification of Dynamically-Determined Object Attributes 		CVE-2025-69691 2026-05-13 05:39 2026-05-8 Show GitHub Exploit DB Packet Storm
5579 7.5 HIGH
Network 		vmware spring_cloud_config When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring C… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2026-40981 2026-05-13 05:34 2026-05-7 Show GitHub Exploit DB Packet Storm
5580 6.1 MEDIUM
Network 		naturalintelligence fast-xml-parser fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior to version 5.7.0, XMLBuilder does not escape the "-->" sequence in comment content or the … CWE-91
Blind XPath Injection 		CVE-2026-41650 2026-05-13 05:30 2026-05-8 Show GitHub Exploit DB Packet Storm