Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
2701 5.5 警告
Local
デル PowerFlex Rack
PowerFlex appliance Intelligent Catalog Software
PowerFlex Manager
デルのPowerFlex appliance Intelligent Catalog Software等の複数製品における暗号アルゴリズムの使用に関する脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2025-46371 2026-05-28 14:33 2026-05-22 Show GitHub Exploit DB Packet Storm
2702 6.5 警告
Network
Splunk Splunk AI Toolkit SplunkのSplunk AI Toolkitにおける不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2026-20238 2026-05-28 14:33 2026-05-20 Show GitHub Exploit DB Packet Storm
2703 7.5 重要
Network
NVIDIA NVIDIA TensorRT NVIDIAのNVIDIA TensorRTにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2026-24188 2026-05-28 14:33 2026-05-20 Show GitHub Exploit DB Packet Storm
2704 5.3 警告
Network
Dropbox Erlang SAML library Lexi Wilson (arekinath)等の複数ベンダの製品におけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-28809 2026-05-28 14:33 2026-03-23 Show GitHub Exploit DB Packet Storm
2705 9.1 緊急
Network
Nexent Nexent Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-31215 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
2706 9.1 緊急
Network
Nexent Nexent Nexentにおける外部からアクセス可能なファイルまたはディレクトリに関する脆弱性 CWE-552
外部からアクセス可能なファイルまたはディレクトリ
CVE-2026-31216 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
2707 9.8 緊急
Network
Nebuly OptiMate NebulyのOptiMateにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-31217 2026-05-28 14:33 2026-05-12 Show GitHub Exploit DB Packet Storm
2708 7.5 重要
Network
Gleam-wisp Wisp Gleam-wispのWispにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-32145 2026-05-28 14:33 2026-04-2 Show GitHub Exploit DB Packet Storm
2709 7.5 重要
Network
Elixir Plug Plug.cowboy Elixir PlugのPlug.cowboyにおける制限またはスロットリング無しのリソースの割り当てに関する脆弱性 CWE-770
制限またはスロットリング無しのリソースの割り当て
CVE-2026-32688 2026-05-28 14:33 2026-04-27 Show GitHub Exploit DB Packet Storm
2710 8.8 重要
Network
9bis KiTTY KovidgoyalのKittyにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-122
ヒープオーバーフロー
CVE-2026-33633 2026-05-28 14:33 2026-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306371 8.8 HIGH
Network
anelectron advanced_electron_forums A Cross-site Request Forgery (CSRF) vulnerability exists in Advanced Electron Forums (AEF) through 1.0.9 due to inadequate confirmation for sensitive transactions in the administrator functions. CWE-352
 Origin Validation Error
CVE-2011-3582 2024-11-21 10:30 2020-01-23 Show GitHub Exploit DB Packet Storm
306372 4.7 MEDIUM
Local
samba
redhat
samba
enterprise_linux
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window whe… CWE-362
Race Condition
CVE-2011-3585 2024-11-21 10:30 2020-01-1 Show GitHub Exploit DB Packet Storm
306373 7.1 HIGH
Local
hardlink_project
redhat
debian
hardlink
enterprise_linux
debian_linux
Hardlink before 0.1.2 operates on full file system objects path names which can allow a local attacker to use this flaw to conduct symlink attacks. CWE-59
Link Following
CVE-2011-3632 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306374 5.3 MEDIUM
Network
ruby-lang ruby Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote … CWE-74
Injection
CVE-2011-3624 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306375 6.5 MEDIUM
Network
tahoe-lafs
debian
tahoe-lafs
debian_linux
Tahoe-LAFS v1.3.0 through v1.8.2 could allow unauthorized users to delete immutable files in some cases. CWE-863
 Incorrect Authorization
CVE-2011-3617 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306376 6.5 MEDIUM
Network
redhat jboss_application_server A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the "Access-Control-Allow-Origin" HTTP… CWE-352
 Origin Validation Error
CVE-2011-3609 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306377 5.4 MEDIUM
Network
redhat jboss_application_server A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick th… CWE-79
Cross-site Scripting
CVE-2011-3606 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306378 7.5 HIGH
Network
apache ofbiz The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of fi… CWE-611
XXE
CVE-2011-3600 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306379 8.8 HIGH
Network
hardlink_project
redhat
debian
hardlink
enterprise_linux
debian_linux
Hardlink before 0.1.2 has multiple integer overflows leading to heap-based buffer overflows because of the way string lengths concatenation is done in the calculation of the required memory space to … CWE-190
 Integer Overflow or Wraparound
CVE-2011-3631 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm
306380 8.8 HIGH
Network
hardlink_project
redhat
debian
hardlink
enterprise_linux
debian_linux
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a special… CWE-787
 Out-of-bounds Write
CVE-2011-3630 2024-11-21 10:30 2019-11-26 Show GitHub Exploit DB Packet Storm