Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3151 6.8 警告
Network 		Bpple (bx33661) Wireshark MCP Bpple (bx33661)のWireshark MCPにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2026-43901 2026-05-15 10:54 2026-05-11 Show GitHub Exploit DB Packet Storm
3152 7.2 重要
Network 		アルバネットワークス株式会社 SD-WAN
ArubaOS 		アルバネットワークス株式会社のArubaOS等の複数製品におけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2026-44872 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3153 5.5 警告
Local 		ubuntu libefiboot ubuntuのlibefibootにおける再帰制御に関する脆弱性 CWE-674
不適切な再帰制御 		CVE-2026-6862 2026-05-15 10:54 2026-04-22 Show GitHub Exploit DB Packet Storm
3154 9.6 緊急
Network 		Ivanti Xtraction IvantiのXtractionにおけるファイル名やパス名の外部制御に関する脆弱性 CWE-73
ファイル名やパス名の外部制御 		CVE-2026-8043 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3155 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける非効率的な正規表現の複雑さに関する脆弱性 CWE-1333
非効率的な正規表現の複雑さ 		CVE-2026-8159 2026-05-15 10:54 2026-05-12 Show GitHub Exploit DB Packet Storm
3156 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける複数の脆弱性 CWE-1321
CWE-248
CVE-2026-8161 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
3157 7.5 重要
Network 		pillarjs multiparty pillarjsのmultipartyにおける例外的な状態の処理に関する脆弱性 CWE-755
例外的な状態における不適切な処理 		CVE-2026-8162 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
3158 5.3 警告
Network 		Leon Timmermans Crypt::Argon2 Leon TimmermansのCrypt::Argon2における複数の脆弱性 CWE-126
CWE-191
CVE-2026-8463 2026-05-15 10:53 2026-05-13 Show GitHub Exploit DB Packet Storm
3159 7.2 重要
Network 		IBM IBM Security Verify Directory IBMのIBM Security Verify Directoryにおける危険なタイプのファイルの無制限アップロードに関する脆弱性 CWE-434
危険なタイプのファイルの無制限アップロード 		CVE-2025-36074 2026-05-15 10:53 2026-04-23 Show GitHub Exploit DB Packet Storm
3160 8.8 重要
Local 		- アップルのmacOSにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御 		CVE-2025-43524 2026-05-15 10:53 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306491 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003 		The kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 does not properly initialize objects, which allows loca… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2018 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
306492 - microsoft pinyin_simple_fast_style
pinyin_ime
pinyin_new_experience_style 		The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-2010 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
306493 - microsoft internet_explorer The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different (1) domain or (2) zone via a "trial and error" attack, aka "XSS Filter Information Disclosure … CWE-79
Cross-site Scripting 		CVE-2011-1992 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
306494 - microsoft office Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka… CWE-399
 Resource Management Errors 		CVE-2011-1983 2024-11-21 10:27 2011-12-14 Show GitHub Exploit DB Packet Storm
306495 - widelands widelands Directory traversal vulnerability in io/filesystem/filesystem.cc in Widelands before 15.1 might allow remote attackers to overwrite arbitrary files via . (dot) characters in a pathname that is used f… CWE-22
Path Traversal 		CVE-2011-1932 2024-11-21 10:27 2011-12-5 Show GitHub Exploit DB Packet Storm
306496 - microsoft windows_server_2008
windows_7
windows_vista 		Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to… NVD-CWE-Other
CVE-2011-2016 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
306497 - microsoft windows_server_2008
windows_7
windows_vista 		Integer overflow in the TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code by … CWE-189
Numeric Errors 		CVE-2011-2013 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
306498 - microsoft windows_server_2008
windows_7 		Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via … CWE-20
 Improper Input Validation  		CVE-2011-2004 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
306499 - microsoft windows_server_2008
windows_xp
windows_7
windows_server_2003
windows_vista 		The LDAP over SSL (aka LDAPS) implementation in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and… CWE-287
Improper Authentication 		CVE-2011-2014 2024-11-21 10:27 2011-11-9 Show GitHub Exploit DB Packet Storm
306500 - ge intelligent_platforms_proficy_historian Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM 43 allow remote attackers to cause a denial of service (daemon crash… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2011-1919 2024-11-21 10:27 2011-11-3 Show GitHub Exploit DB Packet Storm