Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252411 7.5 危険 Wouter Verhelst - nbd の nbd-server.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0530 2012-03-27 18:42 2011-02-22 Show GitHub Exploit DB Packet Storm
252412 5 警告 VMware - VMware の vFabric tc Server におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2011-0527 2012-03-27 18:42 2011-08-11 Show GitHub Exploit DB Packet Storm
252413 4.3 警告 Vanilla Forums - Vanilla Forums の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0526 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
252414 6.8 警告 VideoLAN - VideoLAN VLC メディアプレイヤーの StripTags 関数 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0522 2012-03-27 18:42 2011-02-7 Show GitHub Exploit DB Packet Storm
252415 7.5 危険 MaraDNS - MaraDNS の compress_add_dlabel_points 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0520 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
252416 7.5 危険 gallarific - Gallarific PHP Photo Gallery script の gallery.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0519 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
252417 5.1 警告 lotuscms - LotusCMS Fraise の core/lib/router.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0518 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
252418 7.5 危険 epromptc - E-PROMPT C BetMore Site Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0516 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
252419 2.1 注意 kingsoftsecurity - Kingsoft AntiVirus の KisKrnl.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-0515 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
252420 5 警告 ヒューレット・パッカード - HP Data Protector Manager の RDS サービス (rds.exe) におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-0514 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6341 9.8 CRITICAL
Network 		- - Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed since December 202… CWE-1392
 Use of Default Credentials 		CVE-2026-44159 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
6342 5.8 MEDIUM
Network 		- - Technitium DNS Server aggressively tries to fetch missing RRSIG records or mismatched DNSKEY records. An attacker in control of a domain can cause a vulnerable system to generate excessive network tr… CWE-405
CWE-406
CWE-770
 Asymmetric Resource Consumption (Amplification)
 Insufficient Control of Network Message Volume (Network Amplification)
 Allocation of Resources Without Limits or Throttling 		CVE-2026-45557 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
6343 8.4 HIGH
Local 		- - An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external … - CVE-2026-5804 2026-05-20 02:57 2026-05-20 Show GitHub Exploit DB Packet Storm
6344 5.0 MEDIUM
Network 		mattermost mattermost_server Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticated attacker to redirect… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2026-6333 2026-05-20 02:51 2026-05-18 Show GitHub Exploit DB Packet Storm
6345 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges ca… CWE-79
Cross-site Scripting 		CVE-2025-40901 2026-05-20 02:47 2026-05-19 Show GitHub Exploit DB Packet Storm
6346 9.8 CRITICAL
Network 		h2o h2o A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Handler. Performing a… CWE-20
CWE-502
 Improper Input Validation 
 Deserialization of Untrusted Data 		CVE-2026-8751 2026-05-20 02:46 2026-05-17 Show GitHub Exploit DB Packet Storm
6347 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a mal… CWE-79
Cross-site Scripting 		CVE-2025-40902 2026-05-20 02:44 2026-05-19 Show GitHub Exploit DB Packet Storm
6348 4.8 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileg… CWE-79
Cross-site Scripting 		CVE-2025-40903 2026-05-20 02:44 2026-05-19 Show GitHub Exploit DB Packet Storm
6349 5.3 MEDIUM
Network 		h2o h2o A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-core/src/main/java/water/rapids/ast/prims/misc/AstSetProperty.java of the compon… CWE-266
CWE-284
NVD-CWE-noinfo
 Incorrect Privilege Assignment
Improper Access Control 		CVE-2026-8752 2026-05-20 02:44 2026-05-17 Show GitHub Exploit DB Packet Storm
6350 5.4 MEDIUM
Network 		nozominetworks cmc
guardian 		A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malici… CWE-79
Cross-site Scripting 		CVE-2025-40904 2026-05-20 02:41 2026-05-19 Show GitHub Exploit DB Packet Storm