Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3431 7.5 重要
Network 		マイクロソフト .NET
visual studio 2022 		.NET のなりすましの脆弱性 CWE-138
特殊要素の不適切な無害化 		CVE-2026-32178 2026-05-11 10:58 2026-04-14 Show GitHub Exploit DB Packet Storm
3432 6.5 警告
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2026-32603 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3433 9.1 緊急
Network 		X.Org Foundation
レッドハット		 X.Org X Server
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品における境界外読み取りに関する脆弱性 CWE-125
境界外読み取り 		CVE-2026-34000 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3434 9.1 緊急
Network 		X.Org Foundation
レッドハット		 X.Org X Server
Red Hat Enterprise Linux 		レッドハット等の複数ベンダの製品における不適切な長さの値によるバッファへのアクセスに関する脆弱性 CWE-805
不適切な長さの値によるバッファへのアクセス 		CVE-2026-34002 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3435 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるCRLF インジェクションの脆弱性 CWE-93
CRLF インジェクション 		CVE-2026-34458 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3436 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34459 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3437 7.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-121
スタックオーバーフロー 		CVE-2026-34461 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3438 7.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける複数の脆弱性 CWE-121
CWE-170
CVE-2026-34462 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3439 8.8 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおける複数の脆弱性 CWE-121
CWE-170
CVE-2026-34464 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
3440 7 重要
Local 		sandboxie-plus Sandboxie sandboxie-plusのSandboxieにおけるTime-of-check Time-of-use (TOCTOU) 競合状態の脆弱性 CWE-367
Time-of-check Time-of-use (TOCTOU) 競合状態 		CVE-2026-34596 2026-05-11 10:58 2026-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306451 - bestpractical rt Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-1008 2024-11-21 10:25 2011-03-1 Show GitHub Exploit DB Packet Storm
306452 - bestpractical rt Best Practical Solutions RT before 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate attackers to obtain credentials by resubmitting the login form via t… CWE-255
Credentials Management 		CVE-2011-1007 2024-11-21 10:25 2011-03-1 Show GitHub Exploit DB Packet Storm
306453 - cisco secure_desktop The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this pr… CWE-20
 Improper Input Validation  		CVE-2011-0925 2024-11-21 10:25 2011-03-1 Show GitHub Exploit DB Packet Storm
306454 - f-secure policy_manager The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix 2 on Linux, allows … CWE-200
Information Exposure 		CVE-2011-1103 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306455 - f-secure policy_manager Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix… CWE-79
Cross-site Scripting 		CVE-2011-1102 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306456 - citrix licensing_administration_console Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6, formerly License Management Console, allow remote attackers to (1) access unauthor… NVD-CWE-noinfo
CVE-2011-1101 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306457 - logwatch logwatch logwatch.pl in Logwatch 7.3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in a log file name, as demonstrated via a crafted username to a Samba server. CWE-20
 Improper Input Validation  		CVE-2011-1018 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306458 - ca host-based_intrusion_prevention_system
internet_security_suite_2010
internet_security_suite_2011 		The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion … NVD-CWE-Other
CVE-2011-1036 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306459 - cisco secure_desktop A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute ar… CWE-20
 Improper Input Validation  		CVE-2011-0926 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm
306460 - pixelpost pixelpost Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) select… CWE-89
SQL Injection 		CVE-2011-1100 2024-11-21 10:25 2011-02-26 Show GitHub Exploit DB Packet Storm