Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3111	5.9	警告 Network	Haxx	cURL	HaxxのcURLにおける認証情報の不十分な保護に関する脆弱性	CWE-522 認証情報の不十分な保護	CVE-2026-6253	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

3112	7.5	重要 Network	Haxx	cURL	HaxxのcURLにおける重要な情報の平文での送信に関する脆弱性	CWE-319 重要な情報の平文での送信	CVE-2026-6276	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

3113	5.3	警告 Network	Haxx	cURL	HaxxのcURLにおける不特定の脆弱性	CWE-noinfo 情報不足	CVE-2026-6429	2026-05-18 12:10	2026-05-13	Show	GitHub Exploit DB Packet Storm

3114	7.5	重要 Network	PgBouncer	PgBouncer	PgBouncerにおける整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2026-6664	2026-05-18 12:10	2026-05-9	Show	GitHub Exploit DB Packet Storm

3115	9.8	緊急 Network	PgBouncer	PgBouncer	PgBouncerにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-121 スタックオーバーフロー	CVE-2026-6665	2026-05-18 12:10	2026-05-9	Show	GitHub Exploit DB Packet Storm

3116	7.5	重要 Network	PgBouncer	PgBouncer	PgBouncerにおけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-6666	2026-05-18 12:09	2026-05-9	Show	GitHub Exploit DB Packet Storm

3117	4.3	警告 Network	PgBouncer	PgBouncer	PgBouncerにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-6667	2026-05-18 12:09	2026-05-9	Show	GitHub Exploit DB Packet Storm

3118	5.3	警告 Network	Haxx	cURL	HaxxのcURLにおける証明書検証に関する脆弱性	CWE-295 不正な証明書検証	CVE-2026-7009	2026-05-18 12:09	2026-05-13	Show	GitHub Exploit DB Packet Storm

3119	5.3	警告 Network	Haxx	cURL	HaxxのcURLにおけるCapture-replay による認証回避に関する脆弱性	CWE-294 Capture-replayによる認証回避	CVE-2026-7168	2026-05-18 12:09	2026-05-13	Show	GitHub Exploit DB Packet Storm

3120	3.5	低 Network	GitLab.org	GitLab	GitLab.orgのGitLabにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-7471	2026-05-18 12:09	2026-05-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306411	-	novell	mobility_pack data_synchronizer	WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-for…	CWE-310 Cryptographic Issues	CVE-2011-3013	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306412	-	tremulous urbanterror ioquake3 worldofpadman	tremulous iourbanterror ioquake3_engine world_of_padman	The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, wh…	CWE-20 Improper Input Validation	CVE-2011-3012	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306413	-	mozilla	bugzilla	Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of privat…	NVD-CWE-Other	CVE-2011-2979	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306414	-	mozilla	bugzilla	Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-…	CWE-20 Improper Input Validation	CVE-2011-2978	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306415	-	mozilla	bugzilla	Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain …	NVD-CWE-Other	CVE-2011-2977	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306416	-	mozilla	bugzilla	Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote attackers to inject arbitrary web script or HTML via vectors in…	CWE-79 Cross-site Scripting	CVE-2011-2976	2024-11-21 10:29	2011-08-10	Show	GitHub Exploit DB Packet Storm

306417	-	ruby-lang	ruby	Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number…	CWE-310 Cryptographic Issues	CVE-2011-3009	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm

306418	-	avaya	secure_access_link_gateway	The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allo…	CWE-16 Configuration	CVE-2011-3008	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm

306419	-	valenok shttpd yassl	mongoose shttpd yasslews	Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-2900	2024-11-21 10:29	2011-08-6	Show	GitHub Exploit DB Packet Storm

306420	-	google apple	chrome iphone_os safari	Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.	NVD-CWE-noinfo	CVE-2011-2819	2024-11-21 10:29	2011-08-3	Show	GitHub Exploit DB Packet Storm