Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
3431	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における型の取り違えに関する脆弱性	CWE-843 型の取り違え	CVE-2026-28983	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

3432	6.2	警告 Local	アップル	tvOS iOS iPadOS	アップルのiPadOS等の複数製品におけるNULL ポインタデリファレンスに関する脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2026-28985	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

3433	5.5	警告 Local	アップル	visionos iOS iPadOS watchOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28988	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

3434	7.5	重要 Network	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における境界外読み取りに関する脆弱性	CWE-125 境界外読み取り	CVE-2026-28991	2026-05-15 11:04	2026-05-11	Show	GitHub Exploit DB Packet Storm

3435	4.7	警告 Local	アップル	tvOS iOS watchOS visionos iPadOS	アップルのiPadOS等の複数製品における競合状態に関する脆弱性	CWE-362 競合状態	CVE-2026-28992	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3436	5.5	警告 Local	アップル	visionos iOS iPadOS	アップルのiPadOS等の複数製品におけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-28993	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3437	5.3	警告 Adjacent	アップル	tvOS iOS iPadOS watchOS	アップルのiPadOS等の複数製品における解放済みメモリの使用に関する脆弱性	CWE-416 解放済みメモリの使用	CVE-2026-28994	2026-05-15 11:03	2026-05-11	Show	GitHub Exploit DB Packet Storm

3438	9.8	緊急 Network	Rocket.Chat	Rocket.Chat	Rocket.ChatにおけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2026-29198	2026-05-15 11:03	2026-04-23	Show	GitHub Exploit DB Packet Storm

3439	6.5	警告 Network	Textpattern	Textpattern CMS	TextpatternのTextpattern CMSにおけるアクセス制御に関する脆弱性	CWE-284 不適切なアクセス制御	CVE-2026-30452	2026-05-15 11:03	2026-04-21	Show	GitHub Exploit DB Packet Storm

3440	9.1	緊急 Network	Artica ST	Pandora FMS	Artica STのPandora FMSにおけるリソースの安全ではないデフォルト値への初期化に関する脆弱性	CWE-1188 リソースの安全ではないデフォルト値への初期化	CVE-2026-30805	2026-05-15 11:03	2026-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
306931	-	adobe	acrobat_reader acrobat	Buffer overflow in Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors, a differ…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-2094	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306932	-	adobe	blazeds livecycle_data_services livecycle	Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service v…	CWE-20 Improper Input Validation	CVE-2011-2093	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306933	-	adobe	blazeds livecycle_data_services livecycle	Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly restrict creation of classes during deserialization of (1) AMF and (2) AMFX…	CWE-20 Improper Input Validation	CVE-2011-2092	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306934	-	adobe	coldfusion	Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors.	NVD-CWE-noinfo	CVE-2011-2091	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306935	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not …	CWE-79 Cross-site Scripting	CVE-2011-1894	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306936	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-…	CWE-20 Improper Input Validation	CVE-2011-1873	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306937	-	microsoft	windows_server_2008	Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka…	CWE-399 Resource Management Errors	CVE-2011-1872	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306938	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 …	CWE-399 Resource Management Errors	CVE-2011-1869	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306939	-	microsoft	windows_xp windows_server_2003 windows_2003_server	The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2011-1868	2024-11-21 10:27	2011-06-17	Show	GitHub Exploit DB Packet Storm

306940	-	icinga nagios	icinga nagios	Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the exp…	CWE-79 Cross-site Scripting	CVE-2011-2179	2024-11-21 10:27	2011-06-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed