Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
2881 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-29220 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2882 7.3 重要
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ 		CVE-2026-29226 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2883 7.5 重要
Network 		HSC MailInspector HSCのMailInspectorにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-29962 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
2884 7.5 重要
Network 		HSC MailInspector HSCのMailInspectorにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-29963 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
2885 6.1 警告
Network 		HSC MailInspector HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-29964 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
2886 6.1 警告
Network 		HSC MailInspector HSCのMailInspectorにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2026-29965 2026-05-21 10:53 2026-05-18 Show GitHub Exploit DB Packet Storm
2887 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける入力確認に関する脆弱性 CWE-20
CWE-noinfo
CVE-2026-31378 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2888 6.1 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける複数の脆弱性 CWE-22
CWE-79
CWE-94
CVE-2026-31379 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2889 6.5 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける言語構文の表現に使用される特殊な要素の不適切な無効化に関する脆弱性 CWE-917
言語構文の表現に使用される特殊な要素の不適切な無効化 		CVE-2026-31380 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
2890 5.3 警告
Network 		Apache Software Foundation Apache OFBiz Apache Software FoundationのApache OFBizにおける認証に関する脆弱性 CWE-287
不適切な認証 		CVE-2026-31387 2026-05-21 10:53 2026-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306741 - openttd openttd Multiple buffer overflows in OpenTTD before 1.1.3 allow local users to cause a denial of service (daemon crash) or possibly gain privileges via (1) a crafted BMP file with RLE compression or (2) craf… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3343 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306742 - openttd openttd Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) NAME, (2) PLYR, (3) … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3342 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306743 - openttd openttd Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDE… CWE-189
Numeric Errors 		CVE-2011-3341 2024-11-21 10:30 2011-09-9 Show GitHub Exploit DB Packet Storm
306744 - opera
microsoft
google
mozilla
siemens
haxx
redhat
debian
canonical 		opera_browser
internet_explorer
windows
chrome
firefox
simatic_rf68xr_firmware
simatic_rf615r_firmware
curl
enterprise_linux_server
enterprise_linux_server_aus
enterpris… 		The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode wi… CWE-326
Inadequate Encryption Strength 		CVE-2011-3389 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306745 - opera opera_browser Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an … CWE-200
Information Exposure 		CVE-2011-3388 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306746 - ibm openadmin_tool Multiple cross-site scripting (XSS) vulnerabilities in index.php in IBM OpenAdmin Tool (OAT) before 2.72 for Informix allow remote attackers to inject arbitrary web script or HTML via the (1) informi… CWE-79
Cross-site Scripting 		CVE-2011-3390 2024-11-21 10:30 2011-09-7 Show GitHub Exploit DB Packet Storm
306747 - ibm java The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a clas… CWE-20
 Improper Input Validation  		CVE-2011-3387 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306748 - medtronic paradigm_wireless_insulin_pump Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adv… NVD-CWE-noinfo
CVE-2011-3386 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306749 - websitebaker2
lepton-cms 		websitebaker
lepton 		Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors,… CWE-79
Cross-site Scripting 		CVE-2011-3385 2024-11-21 10:30 2011-09-3 Show GitHub Exploit DB Packet Storm
306750 - php php Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-3268 2024-11-21 10:30 2011-08-26 Show GitHub Exploit DB Packet Storm