Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 4:12 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3071 5.3 警告
Network
Python Software Foundation urllib3 Python Software Foundationのurllib3における情報漏えいに関する脆弱性 CWE-200
CWE-noinfo
CVE-2026-44431 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
3072 7.5 重要
Network
Python Software Foundation urllib3 Python Software Foundationのurllib3における高圧縮データの処理 (データ増幅)に関する脆弱性 CWE-409
高圧縮データの不適切な処理 (データ増幅)
CVE-2026-44432 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
3073 5.7 警告
Adjacent
Frappe ERPNext FrappeのERPNextにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-44440 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
3074 4.3 警告
Network
Frappe ERPNext FrappeのERPNextにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44441 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
3075 9.9 緊急
Network
Frappe ERPNext FrappeのERPNextにおける認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2026-44442 2026-05-18 12:12 2026-05-13 Show GitHub Exploit DB Packet Storm
3076 6.5 警告
Network
Frappe ERPNext FrappeのERPNextにおけるXML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2026-44445 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3077 7.5 重要
Network
Frappe ERPNext FrappeのERPNextにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-44446 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3078 7.5 重要
Network
Frappe ERPNext FrappeのERPNextにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2026-44447 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3079 5.4 警告
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおける解釈の競合に関する脆弱性 CWE-436
解釈の競合
CVE-2026-44576 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
3080 8.6 重要
Network
Vercel, Inc. (旧 Zeit, Inc.) Next.js Vercel, Inc. (旧 Zeit, Inc.)のNext.jsにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-918
サーバサイドリクエストフォージェリ
CVE-2026-44578 2026-05-18 12:11 2026-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306751 - microsoft sharepoint_foundation
sharepoint_server
Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2011-1890 2024-11-21 10:27 2011-09-15 Show GitHub Exploit DB Packet Storm
306752 - mark_stosberg data\ The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass… CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-2201 2024-11-21 10:27 2011-09-15 Show GitHub Exploit DB Packet Storm
306753 - linux linux_kernel The key_replace_session_keyring function in security/keys/process_keys.c in the Linux kernel before 2.6.39.1 does not initialize a certain structure member, which allows local users to cause a denial… CWE-476
 NULL Pointer Dereference
CVE-2011-2184 2024-11-21 10:27 2011-09-7 Show GitHub Exploit DB Packet Storm
306754 6.1 MEDIUM
Physics
linux
redhat
linux_kernel
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_server_eus
The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface (EFI) GUID Partition Table (GPT) entry, which allows phy… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-1776 2024-11-21 10:27 2011-09-7 Show GitHub Exploit DB Packet Storm
306755 7.8 HIGH
Local
linux linux_kernel The cifs_close function in fs/cifs/file.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impac… CWE-476
 NULL Pointer Dereference
CVE-2011-1771 2024-11-21 10:27 2011-09-7 Show GitHub Exploit DB Packet Storm
306756 - gnome networkmanager GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vect… CWE-287
Improper Authentication
CVE-2011-2176 2024-11-21 10:27 2011-09-3 Show GitHub Exploit DB Packet Storm
306757 - xmlsoft libxml2
libxml
Integer overflow in xpath.c in libxml2 2.6.x through 2.6.32 and 2.7.x through 2.7.8, and libxml 1.8.16 and earlier, allows context-dependent attackers to cause a denial of service (crash) and possibl… CWE-189
Numeric Errors
CVE-2011-1944 2024-11-21 10:27 2011-09-3 Show GitHub Exploit DB Packet Storm
306758 - systemtap systemtap SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that a… CWE-189
Numeric Errors
CVE-2011-1781 2024-11-21 10:27 2011-08-30 Show GitHub Exploit DB Packet Storm
306759 - systemtap systemtap SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expres… CWE-189
Numeric Errors
CVE-2011-1769 2024-11-21 10:27 2011-08-30 Show GitHub Exploit DB Packet Storm
306760 - linux
redhat
linux_kernel
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
enterprise_linux_eus
enterprise_linux_aus
The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode, which allows local users to cause a denial of service (kernel i… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2011-2213 2024-11-21 10:27 2011-08-30 Show GitHub Exploit DB Packet Storm