Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
3411 3.3
Local
Artifex Software MuPDF Artifex SoftwareのMuPDFにおけるエスケープ、メタ、またはコントロールシーケンスの不適切な無効化に関する脆弱性 CWE-150
エスケープ、メタ、またはコントロールシーケンスの不適切な無効化
CVE-2026-40505 2026-05-28 14:42 2026-04-16 Show GitHub Exploit DB Packet Storm
3412 7.5 重要
Network
NLnet Labs unbound NLnet Labsのunboundにおける同一生成元ポリシー違反に関する脆弱性 CWE-346
同一生成元ポリシー違反
CVE-2026-40622 2026-05-28 14:42 2026-05-20 Show GitHub Exploit DB Packet Storm
3413 4.8 警告
Network
PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるアクセス制御に関する脆弱性 CWE-284
不適切なアクセス制御
CVE-2026-41999 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
3414 8.6 重要
Network
PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2026-42000 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
3415 7.5 重要
Network
PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2026-42001 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
3416 7.5 重要
Network
PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるシグナルハンドラの競合状態に関する脆弱性 CWE-364
シグナルハンドラの競合状態
CVE-2026-42002 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
3417 8.8 重要
Network
Project Jupyter JupyterLab Project JupyterのJupyterLabにおける複数の脆弱性 CWE-602
CWE-88
CVE-2026-42266 2026-05-28 14:42 2026-05-13 Show GitHub Exploit DB Packet Storm
3418 6.5 警告
Network
PowerDNS PowerDNS Authoritative Server PowerDNSのPowerDNS Authoritative Serverにおけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2026-42396 2026-05-28 14:42 2026-05-21 Show GitHub Exploit DB Packet Storm
3419 4.9 警告
Network
Minio Inc. Minio Minio Inc.のMinioにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2026-42600 2026-05-28 14:42 2026-05-11 Show GitHub Exploit DB Packet Storm
3420 5.5 警告
Local
Linux Linux Kernel LinuxのLinux KernelにおけるNULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2026-43058 2026-05-28 14:41 2026-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307931 - wireshark wireshark The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a den… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2011-1959 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307932 - wireshark wireshark Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Diameter diction… NVD-CWE-Other
CVE-2011-1958 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307933 - wireshark wireshark The dissect_dcm_main function in epan/dissectors/packet-dcm.c in the DICOM dissector in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (infi… CWE-399
 Resource Management Errors
CVE-2011-1957 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307934 - wireshark wireshark The bytes_repr_len function in Wireshark 1.4.5 uses an incorrect pointer argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via arbi… NVD-CWE-Other
CVE-2011-1956 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307935 - postrev post_revolution Multiple cross-site request forgery (CSRF) vulnerabilities in Post Revolution 0.8.0c-2 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests to (1) ajax-webl… CWE-352
 Origin Validation Error
CVE-2011-1954 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307936 - postrev post_revolution Multiple cross-site scripting (XSS) vulnerabilities in common.php in Post Revolution before 0.8.0c-2 allow remote attackers to inject arbitrary web script or HTML via an attribute of a (1) P, a (2) S… CWE-79
Cross-site Scripting
CVE-2011-1953 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307937 - postrev post_revolution common.php in Post Revolution before 0.8.0c-2 allows remote attackers to cause a denial of service (infinite loop) via malformed HTML markup, as demonstrated by an a< sequence. CWE-399
 Resource Management Errors
CVE-2011-1952 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307938 - plone plone plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011. CWE-264
Permissions, Privileges, and Access Controls
CVE-2011-1950 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307939 - plone plone Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via uns… CWE-79
Cross-site Scripting
CVE-2011-1949 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm
307940 - plone plone Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2011-1948 2024-11-21 10:27 2011-06-7 Show GitHub Exploit DB Packet Storm