Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
3481 4.3 警告
Network 		Timo Sirainen
Open-Xchange		 Dovecot Pro
Dovecot 		Timo Sirainen等の複数ベンダの製品におけるアクセス制御に関する脆弱性 CWE-284
CWE-noinfo
CVE-2026-40020 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
3482 7.8 重要
Local 		マイクロソフト Azure Connected Machine Agent Azure Connected Machine Agent の特権の昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2026-40381 2026-05-20 13:20 2026-05-12 Show GitHub Exploit DB Packet Storm
3483 9.8 緊急
Network 		エレコム株式会社 WRC-XE5400GS-G
WRC-BE72XSD-B
WAB-BE72-M
WRC-X1800GS-B
WRC-BE65QSD-B
WRC-X6000QSA-G
WRC-X3000GS2A-B
WRC-W702-B
WRC-X6000XS-G
WAB-BE36-M
WRC-X6000XST-G
WRC-X3000GS2-B 		エレコム製無線LANルーターおよび無線アクセスポイントにおける複数の脆弱性（2026年5月） CWE-78
CWE-79
CWE-Other
CVE-2026-25107
CVE-2026-35506
CVE-2026-40621
CVE-2026-42062
CVE-2026-42948
CVE-2026-42950
CVE-2026-42961 		2026-05-19 17:24 2026-05-12 Show GitHub Exploit DB Packet Storm
3484 - - （複数のベンダ） （複数の製品） CISA ICS Advisory / ICS Medical Advisory（2026年05月14日） - - 2026-05-18 14:06 2026-05-15 Show GitHub Exploit DB Packet Storm
3485 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71297 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3486 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71298 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3487 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71299 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3488 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71300 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3489 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71301 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
3490 5.5 警告
Local 		Linux Linux Kernel LinuxのLinux Kernelにおける不特定の脆弱性 CWE-noinfo
情報不足 		CVE-2025-71302 2026-05-18 12:19 2026-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
305611 - canonical ubuntu_linux The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or re… NVD-CWE-Other
CVE-2011-4408 2024-11-21 10:32 2012-06-16 Show GitHub Exploit DB Packet Storm
305612 - gnu gnash plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4328 2024-11-21 10:32 2012-06-16 Show GitHub Exploit DB Packet Storm
305613 - bestpractical rt SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a… CWE-89
SQL Injection 		CVE-2011-4460 2024-11-21 10:32 2012-06-5 Show GitHub Exploit DB Packet Storm
305614 - bestpractical rt Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic ci… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-4459 2024-11-21 10:32 2012-06-5 Show GitHub Exploit DB Packet Storm
305615 - bestpractical rt Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via u… CWE-94
Code Injection 		CVE-2011-4458 2024-11-21 10:32 2012-06-5 Show GitHub Exploit DB Packet Storm
305616 5.5 MEDIUM
Local 		linux linux_kernel The Linux kernel before 2.6.37 does not properly implement a certain clock-update optimization, which allows local users to cause a denial of service (system hang) via an application that executes co… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2011-4621 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
305617 - linux linux_kernel Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhan… CWE-189
Numeric Errors 		CVE-2011-4611 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
305618 5.5 MEDIUM
Local 		linux linux_kernel The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an inc… CWE-476
 NULL Pointer Dereference 		CVE-2011-4594 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
305619 - linux
avaya 		linux_kernel
96x1_ip_deskphone_firmware 		The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial … CWE-399
 Resource Management Errors 		CVE-2011-4326 2024-11-21 10:32 2012-05-17 Show GitHub Exploit DB Packet Storm
305620 - cisco ciscoworks_common_services CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Prime LAN Management Solution and other products, allows remote attackers to inject arbitrary H… CWE-94
Code Injection 		CVE-2011-4237 2024-11-21 10:32 2012-05-3 Show GitHub Exploit DB Packet Storm