Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256621 7.5 危険 レッドハット - Plone における管理者のアクセス権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-0720 2011-04-27 11:30 2011-02-3 Show GitHub Exploit DB Packet Storm
256622 7.5 危険 CA Technologies - 複数の CA 製品の mng_core_com.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3984 2011-04-27 11:29 2010-12-9 Show GitHub Exploit DB Packet Storm
256623 2.1 注意 freedesktop.org
サイバートラスト株式会社
レッドハット
- D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4352 2011-04-27 11:26 2010-12-30 Show GitHub Exploit DB Packet Storm
256624 - - foolabs - Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性 - - 2011-04-26 12:35 2011-03-22 Show GitHub Exploit DB Packet Storm
256625 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1141 2011-04-26 12:28 2011-02-28 Show GitHub Exploit DB Packet Storm
256626 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の wiretap/pcapng.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0024 2011-04-26 12:25 2010-08-29 Show GitHub Exploit DB Packet Storm
256627 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の NTLMSSP 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-1143 2011-04-26 12:24 2010-08-29 Show GitHub Exploit DB Packet Storm
256628 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の dissect_ms_compressed_string および dissect_mscldap_string 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1140 2011-04-26 12:23 2011-02-22 Show GitHub Exploit DB Packet Storm
256629 4.3 警告 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の wiretap/pcapng.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1139 2011-04-26 12:21 2011-02-7 Show GitHub Exploit DB Packet Storm
256630 6.8 警告 Wireshark
レッドハット
- Wireshark の wiretap/dct3trace.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0713 2011-04-26 12:20 2011-02-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
6691 8.8 HIGH
Network
postgresql postgresql Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code… CWE-190
 Integer Overflow or Wraparound
CVE-2026-6473 2026-05-18 23:59 2026-05-14 Show GitHub Exploit DB Packet Storm
6692 5.4 MEDIUM
Network
postgresql postgresql Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, t… CWE-862
 Missing Authorization
CVE-2026-6472 2026-05-18 23:59 2026-05-14 Show GitHub Exploit DB Packet Storm
6693 6.5 MEDIUM
Network
grafana grafana The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated us… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-28376 2026-05-18 23:57 2026-05-14 Show GitHub Exploit DB Packet Storm
6694 5.5 MEDIUM
Local
m2team nanazip NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a denial-of-service vulnerability exists in the littlefs filesystem image parser in NanaZip. The handler's Open method re… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-42444 2026-05-18 23:17 2026-05-13 Show GitHub Exploit DB Packet Storm
6695 8.8 HIGH
Network
postgresql postgresql SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credenti… CWE-89
SQL Injection
CVE-2026-6638 2026-05-18 23:14 2026-05-14 Show GitHub Exploit DB Packet Storm
6696 7.5 HIGH
Network
openbao openbao OpenBao is an open source identity-based secrets management system. Prior to 2.5.3, when OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before marking… CWE-212
 Improper Removal of Sensitive Information Before Storage or Transfer
CVE-2026-42186 2026-05-18 23:10 2026-05-15 Show GitHub Exploit DB Packet Storm
6697 6.5 MEDIUM
Network
fleetdm fleet Fleet is open source device management software. Prior to version 4.81.0, Fleet contained a denial-of-service (DoS) issue in the gRPC Launcher `PublishLogs` endpoint. In affected versions, certain un… CWE-20
NVD-CWE-noinfo
 Improper Input Validation 
CVE-2026-26062 2026-05-18 23:09 2026-05-15 Show GitHub Exploit DB Packet Storm
6698 7.5 HIGH
Network
netty netty Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and close TCP connections that receive a RST after bei… CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2026-42577 2026-05-18 23:05 2026-05-14 Show GitHub Exploit DB Packet Storm
6699 9.8 CRITICAL
Network
fleetdm fleet Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands a… CWE-78
OS Command 
CVE-2026-26191 2026-05-18 23:05 2026-05-15 Show GitHub Exploit DB Packet Storm
6700 6.5 MEDIUM
Network
netty netty Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently overflows int, enabling request smuggling attacks. Th… CWE-190
CWE-444
 Integer Overflow or Wraparound
HTTP Request Smuggling
CVE-2026-42580 2026-05-18 23:03 2026-05-14 Show GitHub Exploit DB Packet Storm