Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3131	6.1	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-31906	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

3132	7.5	重要 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおける情報漏えいに関する脆弱性	CWE-200 情報漏えい	CVE-2026-31909	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

3133	7.5	重要 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるサーバサイドのリクエストフォージェリの脆弱性	CWE-918 サーバサイドリクエストフォージェリ	CVE-2026-31910	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

3134	9.1	緊急 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるハードコードされた暗号鍵の使用に関する脆弱性	CWE-321 ハードコードされた暗号鍵の使用	CVE-2026-31986	2026-05-21 10:53	2026-05-19	Show	GitHub Exploit DB Packet Storm

3135	4.8	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2026-3495	2026-05-21 10:53	2026-05-18	Show	GitHub Exploit DB Packet Storm

3136	6.5	警告 Network	Apache Software Foundation	Apache OFBiz	Apache Software FoundationのApache OFBizにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-35086	2026-05-21 10:52	2026-05-19	Show	GitHub Exploit DB Packet Storm

3137	8.8	重要 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Office Long Term Servicing Channel (LTSC)	Microsoft Office クイック実行の特権の昇格の脆弱性	CWE-1220 アクセス制御の不十分な粒度	CVE-2026-35436	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

3138	5.5	警告 Local	マイクロソフト	Microsoft 365 Apps Microsoft Office Microsoft Word Office Long Term Servicing Channel (LTSC)	Microsoft Word の情報漏えいの脆弱性	CWE-552 外部からアクセス可能なファイルまたはディレクトリ	CVE-2026-35440	2026-05-21 10:52	2026-05-12	Show	GitHub Exploit DB Packet Storm

3139	4.3	警告 Network	Mattermost, Inc.	Mattermost Server	Mattermost, Inc.のMattermost Serverにおける認証の欠如に関する脆弱性	CWE-862 認証の欠如	CVE-2026-3637	2026-05-21 10:52	2026-05-18	Show	GitHub Exploit DB Packet Storm

3140	9.8	緊急 Network	H2O.ai	H2O	H2O.aiのH2Oにおけるコードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2026-3960	2026-05-21 10:52	2026-04-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
307411	-	osgeo umn	mapserver	Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-2704	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307412	-	osgeo umn	mapserver	Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filte…	CWE-89 SQL Injection	CVE-2011-2703	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307413	-	phpmyadmin	phpmyadmin	Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via direct…	CWE-22 Path Traversal	CVE-2011-2643	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307414	-	phpmyadmin	phpmyadmin	Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users…	CWE-79 Cross-site Scripting	CVE-2011-2642	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307415	-	hp	network_automation	SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2011-2403	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307416	-	hp	network_automation	Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2011-2402	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307417	-	hp	data_protector	Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.	NVD-CWE-noinfo	CVE-2011-2399	2024-11-21 10:28	2011-08-2	Show	GitHub Exploit DB Packet Storm

307418	-	hp	linux_imaging_and_printing_project	foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.	CWE-20 Improper Input Validation	CVE-2011-2697	2024-11-21 10:28	2011-07-30	Show	GitHub Exploit DB Packet Storm

307419	-	samba canonical debian	samba ubuntu_linux debian_linux	Cross-site scripting (XSS) vulnerability in the chg_passwd function in web/swat.c in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allows remote authenticated administrators to …	CWE-79 Cross-site Scripting	CVE-2011-2694	2024-11-21 10:28	2011-07-30	Show	GitHub Exploit DB Packet Storm

307420	-	samba debian canonical	samba debian_linux ubuntu_linux	Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web Administration Tool (SWAT) in Samba 3.x before 3.5.10 allow remote attackers to hijack the authentication of administrators…	CWE-352 Origin Validation Error	CVE-2011-2522	2024-11-21 10:28	2011-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed