Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252281 9.3 危険 アドビシステムズ - Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0318 2011-06-29 12:14 2011-06-14 Show GitHub Exploit DB Packet Storm
252282 9.3 危険 アドビシステムズ - Adobe Shockwave Player の Dirapi.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-0317 2011-06-29 12:13 2011-06-14 Show GitHub Exploit DB Packet Storm
252283 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2106 2011-06-29 12:11 2011-06-14 Show GitHub Exploit DB Packet Storm
252284 4.3 警告 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2011-2104 2011-06-29 12:10 2011-06-14 Show GitHub Exploit DB Packet Storm
252285 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2103 2011-06-29 12:10 2011-06-14 Show GitHub Exploit DB Packet Storm
252286 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2011-2102 2011-06-29 12:08 2011-06-14 Show GitHub Exploit DB Packet Storm
252287 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション
CVE-2011-2101 2011-06-29 12:07 2011-06-14 Show GitHub Exploit DB Packet Storm
252288 6.9 警告 アドビシステムズ
ターボリナックス
- Windows 上で稼働する Adobe Reader および Acrobat における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-2100 2011-06-29 12:06 2011-06-14 Show GitHub Exploit DB Packet Storm
252289 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2099 2011-06-29 12:05 2011-06-14 Show GitHub Exploit DB Packet Storm
252290 9.3 危険 アドビシステムズ
ターボリナックス
- Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2098 2011-06-29 12:04 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4281 6.7 MEDIUM
Local
- - A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-4878 2026-04-25 11:16 2026-04-10 Show GitHub Exploit DB Packet Storm
4282 8.8 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Mass Assignment vulnerability in the DocumentStore creation endpoint allows authenticated us… CWE-284
CWE-639
CWE-915
Improper Access Control
 Authorization Bypass Through User-Controlled Key
 Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-41277 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
4283 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset password link over the u… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2026-41275 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
4284 8.3 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, a Server-Side Request Forgery (SSRF) protection bypass vulnerability exists in the Custom Func… CWE-284
CWE-918
Improper Access Control
Server-Side Request Forgery (SSRF) 
CVE-2026-41270 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
4285 7.5 HIGH
Network
flowiseai flowise Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, /api/v1/public-chatbotConfig/:id ep exposes sensitive data including API keys, HTTP authorizat… CWE-200
CWE-522
CWE-862
Information Exposure
 Insufficiently Protected Credentials
 Missing Authorization
CVE-2026-41266 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
4286 5.9 MEDIUM
Network
- - @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid code_verifier values (including one-character strings) for S256 PKC… CWE-307
CWE-1289
mproper Restriction of Excessive Authentication Attempts
 Improper Validation of Unsafe Equivalence in Input
CVE-2026-41213 2026-04-25 11:16 2026-04-24 Show GitHub Exploit DB Packet Storm
4287 7.5 HIGH
Network
p11-kit_project
redhat
p11-kit
hardened_images
enterprise_linux
A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters se… CWE-824
 Access of Uninitialized Pointer
CVE-2026-2100 2026-04-25 11:16 2026-03-27 Show GitHub Exploit DB Packet Storm
4288 7.5 HIGH
Network
p11-kit_project
redhat
p11-kit
hardened_images
enterprise_linux
Se encontró una falla en p11-kit. Un atacante remoto podría explotar esta vulnerabilidad al llamar a la función C_DeriveKey en un token remoto con parámetros específicos del mecanismo de derivación I… CWE-824
 Access of Uninitialized Pointer
CVE-2026-2100 2026-04-25 11:16 2026-03-27 Show GitHub Exploit DB Packet Storm
4289 7.8 HIGH
Local
- - A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a si… CWE-427
 Uncontrolled Search Path Element
CVE-2025-14821 2026-04-25 09:16 2026-04-8 Show GitHub Exploit DB Packet Storm
4290 - - - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. - CVE-2026-6175 2026-04-25 08:16 2026-04-25 Show GitHub Exploit DB Packet Storm