Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2681 7.5 重要
Network
Open JS Foundation Node Version Manager (NVM) Open JS FoundationのNode Version Manager (NVM)におけるOS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2026-10796 2026-06-8 11:49 2026-06-4 Show GitHub Exploit DB Packet Storm
2682 7.8 重要
Local
NVIDIA transformers4rec NVIDIAのtransformers4recにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-24162 2026-06-8 11:49 2026-05-26 Show GitHub Exploit DB Packet Storm
2683 7.8 重要
Local
NVIDIA NVTabular NVIDIAのNVTabularにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-24221 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
2684 7.8 重要
Local
NVIDIA NVTabular NVIDIAのNVTabularにおける信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2026-24237 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
2685 6.8 警告
Network
SWUpdate SWUpdate SWUpdateにおける複数の脆弱性 CWE-125
CWE-191
CVE-2026-28525 2026-06-8 11:49 2026-04-23 Show GitHub Exploit DB Packet Storm
2686 7.5 重要
Network
turbo-stream
Shopify
React Router
Turbo Stream
Shopify等の複数ベンダの製品における制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-34077 2026-06-8 11:49 2026-06-2 Show GitHub Exploit DB Packet Storm
2687 6.5 警告
Network
Apnotic Password Pusher ApnoticのPassword Pusherにおける代替パスまたはチャネルを使用した認証回避に関する脆弱性 CWE-288
CWE-noinfo
CVE-2026-41308 2026-06-8 11:48 2026-05-8 Show GitHub Exploit DB Packet Storm
2688 7.5 重要
Network
Shopify remix-run/server-runtime
React Router
ShopifyのReact Router等の複数製品におけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-42342 2026-06-8 11:48 2026-06-2 Show GitHub Exploit DB Packet Storm
2689 5.3 警告
Network
forms project forms NextcloudのFormsにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-45543 2026-06-8 11:48 2026-06-1 Show GitHub Exploit DB Packet Storm
2690 8.1 重要
Network
Get-hermes Hermes Web UI Get-hermesのHermes Web UIにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-6832 2026-06-8 11:48 2026-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305701 - openstack nova Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to ov… CWE-22
Path Traversal
CVE-2011-4596 2024-11-21 10:32 2011-12-24 Show GitHub Exploit DB Packet Storm
305702 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2011-4782 2024-11-21 10:32 2011-12-23 Show GitHub Exploit DB Packet Storm
305703 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in libraries/display_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attackers to inject arbitrary web script or HTML via crafted URL … CWE-79
Cross-site Scripting
CVE-2011-4780 2024-11-21 10:32 2011-12-23 Show GitHub Exploit DB Packet Storm
305704 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted database name, related to the Data… CWE-79
Cross-site Scripting
CVE-2011-4634 2024-11-21 10:32 2011-12-23 Show GitHub Exploit DB Packet Storm
305705 - pmwiki pmwiki The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequences in a crafted order parameter in a pagelist directive,… CWE-94
Code Injection
CVE-2011-4453 2024-11-21 10:32 2011-12-23 Show GitHub Exploit DB Packet Storm
305706 - moodle moodle CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary H… CWE-94
Code Injection
CVE-2011-4203 2024-11-21 10:32 2011-12-23 Show GitHub Exploit DB Packet Storm
305707 - zftpserver zftpserver_suite Directory traversal vulnerability in zFTPServer Suite 6.0.0.52 allows remote authenticated users to delete arbitrary directories via a crafted RMD (aka rmdir) command. CWE-22
Path Traversal
CVE-2011-4717 2024-11-21 10:32 2011-12-20 Show GitHub Exploit DB Packet Storm
305708 - unbound unbound Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) … CWE-399
 Resource Management Errors
CVE-2011-4528 2024-11-21 10:32 2011-12-20 Show GitHub Exploit DB Packet Storm
305709 - pidgin pidgin The silc_channel_message function in ops.c in the SILC protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attacke… CWE-20
 Improper Input Validation 
CVE-2011-4603 2024-11-21 10:32 2011-12-17 Show GitHub Exploit DB Packet Storm
305710 - pidgin pidgin The XMPP protocol plugin in libpurple in Pidgin before 2.10.1 does not properly handle missing fields in (1) voice-chat and (2) video-chat stanzas, which allows remote attackers to cause a denial of … CWE-20
 Improper Input Validation 
CVE-2011-4602 2024-11-21 10:32 2011-12-17 Show GitHub Exploit DB Packet Storm