Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3181 7.8 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows WAN ARP Driver Elevation of Privilege Vulnerability CWE-416
解放済みメモリの使用
CVE-2026-40408 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3182 7 重要
Local
マイクロソフト Microsoft Windows 11 25h2
Microsoft Windows Server 2016
Microsoft Windows 10 1809
Microsoft Windows 11 23h2
Microsoft Wind…
Windows SMB クライアントの特権の昇格の脆弱性 CWE-416
解放済みメモリの使用
CVE-2026-40410 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3183 9.6 緊急
Network
TanStack tanstack/react-start-rsc
@tanstack/router-devtools-core
@tanstack/router-utils
@tanstack/react-router-devtools
@tanstack/valibot-adapter
@tanstack/zod-adapter
@tanstack/vue-start-se…
TanStackの@tanstack/arktype-adapter等の複数製品における埋め込まれた悪意のあるコードに関する脆弱性 CWE-506
埋め込まれた悪意のあるコード
CVE-2026-45321 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3184 6.5 警告
Network
IBM
HCL Technologies Limited
BigFix WebUI Reports
BigFix WebUI Common
BigFix WebUI API
BigFix WebUI Framework
BigFix WebUI Profile Management
BigFix WebU…
HCL Technologies LimitedのBigFix WebUI API等の複数製品における不正な認証に関する脆弱性 CWE-863
不正な認証
CVE-2025-15633 2026-05-18 12:06 2026-05-9 Show GitHub Exploit DB Packet Storm
3185 4.3 警告
Network
IBM
HCL Technologies Limited
BigFix WebUI Reports
BigFix WebUI Common
BigFix WebUI API
BigFix WebUI Framework
BigFix WebUI Profile Management
BigFix WebU…
HCL Technologies LimitedのBigFix WebUI API等の複数製品における認証の欠如に関する脆弱性 CWE-862
認証の欠如
CVE-2025-15634 2026-05-18 12:06 2026-05-9 Show GitHub Exploit DB Packet Storm
3186 4.9 警告
Network
Buffalo Americas, Inc. TeraStation NAS TS5400R Firmware Buffalo Americas, Inc.のTeraStation NAS TS5400R Firmwareにおける重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性 CWE-732
重要なリソースに対する不適切なパーミッションの割り当て
CVE-2026-29516 2026-05-18 12:06 2026-03-16 Show GitHub Exploit DB Packet Storm
3187 6.5 警告
Network
Mem0 mem0 Mem0のmem0における複数の脆弱性 CWE-306
CWE-862
CVE-2026-31241 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3188 9.1 緊急
Network
Mem0 mem0 Mem0のmem0における複数の脆弱性 CWE-306
CWE-862
CVE-2026-31242 2026-05-18 12:06 2026-05-12 Show GitHub Exploit DB Packet Storm
3189 6.5 警告
Network
Mem0 mem0 Mem0のmem0における複数の脆弱性 CWE-306
CWE-862
CVE-2026-31243 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
3190 6.5 警告
Network
Mem0 mem0 Mem0のmem0における複数の脆弱性 CWE-306
CWE-862
CVE-2026-31244 2026-05-18 12:05 2026-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306341 - phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in the Tracking feature in phpMyAdmin 3.3.x before 3.3.10.4 and 3.4.x before 3.4.4 allow remote attackers to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting
CVE-2011-3181 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306342 - pidgin pidgin
libpurple
The irc_msg_who function in msgs.c in the IRC protocol plugin in libpurple 2.8.0 through 2.9.0 in Pidgin before 2.10.0 does not properly validate characters in nicknames, which allows user-assisted r… NVD-CWE-Other
CVE-2011-2943 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306343 - linux linux_kernel The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks, which allows local users to cause a denial of service (… CWE-476
 NULL Pointer Dereference
CVE-2011-2928 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306344 - apache
suse
opensuse
canonical
http_server
linux_enterprise_server
opensuse
linux_enterprise_software_development_kit
ubuntu_linux
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range head… CWE-400
 Uncontrolled Resource Consumption
CVE-2011-3192 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306345 - google chrome The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have uns… CWE-20
 Improper Input Validation 
CVE-2011-2839 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306346 - google chrome Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform … CWE-190
 Integer Overflow or Wraparound
CVE-2011-2829 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306347 - google chrome Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-boun… CWE-787
 Out-of-bounds Write
CVE-2011-2828 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306348 - google
apple
chrome
iphone_os
itunes
safari
Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching. CWE-416
 Use After Free
CVE-2011-2827 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306349 - google chrome Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins. NVD-CWE-noinfo
CVE-2011-2826 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm
306350 - google
apple
chrome
iphone_os
itunes
safari
Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts. CWE-416
 Use After Free
CVE-2011-2825 2024-11-21 10:29 2011-08-30 Show GitHub Exploit DB Packet Storm