Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3221	7.5	重要 Network	アップル	iOS tvOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28904	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3222	7.5	重要 Network	アップル	iOS iPadOS tvOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28905	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3223	7.5	重要 Network		-	アップルのmacOSにおけるリソースの枯渇に関する脆弱性	CWE-400 リソースの枯渇	CVE-2026-28908	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3224	7.5	重要 Network	アップル	iOS iPadOS tvOS watchOS	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28913	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3225	7.8	重要 Local		-	アップルのmacOSにおける権限管理に関する脆弱性	CWE-269 不適切な権限管理	CVE-2026-28919	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3226	8.8	重要 Local		-	アップルのmacOSにおけるログファイルからの情報漏えいに関する脆弱性	CWE-532 ログファイルからの情報漏えい	CVE-2026-28923	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3227	7.5	重要 Network		-	アップルのmacOSにおける競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28924	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3228	7.5	重要 Network		-	アップルのmacOSにおける古典的バッファオーバーフローの脆弱性	CWE-120 古典的バッファオーバーフロー	CVE-2026-28925	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3229	7.5	重要 Network	アップル	iOS iPadOS	アップルのiPadOS等の複数製品における不正な比較ロジックの粒度に関する脆弱性	CWE-1254 不正な比較ロジックの粒度	CVE-2026-28929	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

3230	7.5	重要 Network	アップル	iOS iPadOS visionos	アップルのiPadOS等の複数製品におけるバッファエラーの脆弱性	CWE-119 バッファエラー	CVE-2026-28944	2026-05-14 10:21	2026-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306481	-	dovecot	dovecot	script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a scrip…	CWE-22 Path Traversal	CVE-2011-2167	2024-11-21 10:27	2011-05-25	Show	GitHub Exploit DB Packet Storm

306482	-	dovecot	dovecot	script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveragin…	CWE-16 Configuration	CVE-2011-2166	2024-11-21 10:27	2011-05-25	Show	GitHub Exploit DB Packet Storm

306483	-	dovecot	dovecot	lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of se…	CWE-20 Improper Input Validation	CVE-2011-1929	2024-11-21 10:27	2011-05-25	Show	GitHub Exploit DB Packet Storm

306484	-	apache	apr-util http_server	The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infi…	CWE-399 Resource Management Errors	CVE-2011-1928	2024-11-21 10:27	2011-05-25	Show	GitHub Exploit DB Packet Storm

306485	-	watchguard	xcs	The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-2165	2024-11-21 10:27	2011-05-24	Show	GitHub Exploit DB Packet Storm

306486	-	cmu	cyrus_imap_server	The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-1926	2024-11-21 10:27	2011-05-24	Show	GitHub Exploit DB Packet Storm

306487	-	netbsd ihji	netbsd pmake	The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_depend##### temporary file, re…	CWE-59 Link Following	CVE-2011-1920	2024-11-21 10:27	2011-05-24	Show	GitHub Exploit DB Packet Storm

306488	-	mediawiki	mediawiki	includes/User.php in MediaWiki before 1.16.5, when wgBlockDisablesLogin is enabled, does not clear certain cached data after verification of an auth token fails, which allows remote attackers to bypa…	CWE-287 Improper Authentication	CVE-2011-1766	2024-11-21 10:27	2011-05-24	Show	GitHub Exploit DB Packet Storm

306489	-	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.5, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file a…	CWE-79 Cross-site Scripting	CVE-2011-1765	2024-11-21 10:27	2011-05-24	Show	GitHub Exploit DB Packet Storm

306490	-	adobe	photoshop	Multiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and attack vectors.	NVD-CWE-noinfo	CVE-2011-2164	2024-11-21 10:27	2011-05-21	Show	GitHub Exploit DB Packet Storm