Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
2891	6.1	警告 Network	Gofiber	Fiber	GofiberのFiberにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42554	2026-05-20 13:29	2026-05-11	Show	GitHub Exploit DB Packet Storm

2892	9	緊急 Network	Gitroom	Postiz	GitroomのPostizにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-42556	2026-05-20 13:29	2026-05-8	Show	GitHub Exploit DB Packet Storm

2893	7.5	重要 Network	Netty	Netty	Nettyにおける有効なライフタイム後のリソースの解放の欠如に関する脆弱性	CWE-772 有効なライフタイム後のリソースの解放の欠如	CVE-2026-42577	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2894	7.5	重要 Network	Netty	Netty	NettyにおけるHTTP レスポンス分割に関する脆弱性	CWE-113 HTTP レスポンスの分割	CVE-2026-42578	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2895	9.1	緊急 Network	Netty	Netty	Nettyにおける複数の脆弱性	CWE-20 CWE-400 CWE-626	CVE-2026-42579	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2896	6.5	警告 Network	Netty	Netty	Nettyにおける複数の脆弱性	CWE-190 CWE-444	CVE-2026-42580	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2897	9.8	緊急 Network	Netty	Netty	NettyにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-42581	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2898	7.5	重要 Network	Netty	Netty	Nettyにおける複数の脆弱性	CWE-770 CWE-789	CVE-2026-42582	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2899	7.5	重要 Network	Netty	Netty	Nettyにおける複数の脆弱性	CWE-400 CWE-770	CVE-2026-42583	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

2900	9.1	緊急 Network	Netty	Netty	NettyにおけるHTTP リクエストスマグリングに関する脆弱性	CWE-444 HTTP リクエストスマグリング	CVE-2026-42584	2026-05-20 13:29	2026-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306571	-	novell	mobility_pack data_synchronizer	The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensit…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-3014	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306572	-	novell	mobility_pack data_synchronizer	WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-for…	CWE-310 Cryptographic Issues	CVE-2011-3013	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306573	-	tremulous urbanterror ioquake3 worldofpadman	tremulous iourbanterror ioquake3_engine world_of_padman	The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, wh…	CWE-20 Improper Input Validation	CVE-2011-3012	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306574	-	mozilla	bugzilla	Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of privat…	NVD-CWE-Other	CVE-2011-2979	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306575	-	mozilla	bugzilla	Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-…	CWE-20 Improper Input Validation	CVE-2011-2978	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306576	-	mozilla	bugzilla	Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain …	NVD-CWE-Other	CVE-2011-2977	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306577	-	mozilla	bugzilla	Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote attackers to inject arbitrary web script or HTML via vectors in…	CWE-79 Cross-site Scripting	CVE-2011-2976	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306578	-	ruby-lang	ruby	Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number…	CWE-310 Cryptographic Issues	CVE-2011-3009	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm

306579	-	avaya	secure_access_link_gateway	The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allo…	CWE-16 Configuration	CVE-2011-3008	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm

306580	-	valenok shttpd yassl	mongoose shttpd yasslews	Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-2900	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm